Chapter 9: Exploring Computer Forensics

Within the field of cybersecurity, there is an entire branch that focuses on digital and computer forensics. Computer forensics is a much-needed skill for anyone who is working in the field of IT security, whether they're a security administrator or even a security analyst, simply because there are many threat actors who commit a lot of cyber-crime and wreak havoc within many organizations. Using computer forensics, you'll be able to trace the source of a cyber-attack back to the threat actor, which will then allow you to take legal action against the responsible person or group.

Throughout this chapter, you will learn about the need for computer forensics within the cybersecurity industry and the important role it plays in helping us trace a cyber-attack back to the threat actors. Additionally, you will discover the characteristics of various types of evidence and will be able to compare tampered and untampered disk images to determine...