What is digital forensics?
The first thing I’d like to cover in this chapter is an understanding of digital forensics and its proper practices and procedures. At some point, you may have come across several books, blogs, and even videos demonstrating various aspects of digital forensics and the different tools used. It is of great importance to understand that forensics itself is a science involving very well-documented best practices and methods to reveal whether something exists or does not.
Digital forensics involves the preservation, acquisition, documentation, analysis, and interpretation of evidence from various storage media types found. It is not limited to laptops, desktops, tablets, and mobile devices but also extends to data in transit, which is transmitted across public or private networks.
In most cases, digital forensics involves the discovery and/or recovery of data using various methods and tools available to the investigator. Digital forensics investigations...
