Role of Computer Forensics in Criminal Investigation
Computer forensics is a branch of forensic science which focuses on criminal procedure, law and evidence applicable to computer and other related devices. It is related to the process of obtaining, processing, analyzing, and storing digital information for the purpose of being used as evidence in criminal, civil as well as administrative cases.
Discuss the following on the basis of your knowledge of computer forensics and emerging technologies:
Analyze and explain under what circumstances companies should employ computer forensics. Explain with the help of examples.
How should a computer forensics investigator document the chain of custody of evidence from the time it is received until it is returned? Describe with the help of well corroborated reasoning and examples.
Explain three most essential steps that computer forensics examiners should follow before presenting the computer evidence in the court. Why is each step necessary?
Why is the chain of custody important? Analyze whether it is necessary for each person in the chain of custody to testify at the trial to authenticate the evidence.
How would you differentiate between a forensic investigator and a computer forensic criminalist?
If given a choice, which role would you prefer- investigator or criminalist and why? Analyze which role is more suitable for dealing with digital forensics.