CYBER CRIMES AND INVESTIGATION

Forensic Methods Used To Investigate Security Breaches

Introduction

Computer forensics applies computer investigation and examination techniques that help in collecting proof regarding something that has happened on a computer and is to be preceded in a court of law (Bassett et al, 2006). Computer forensics needs a proportionate blend of technological skills, legal insight, and moral conduct. Computer forensics experts employ powerful software tools to expose data to be sorted through, and then must figure out the significant facts regarding how to present them in a court of law. Cyber crime rates are increasing and computer forensics can be regarded as a crucial discipline that has the command to obstruct the advancement of these cyber criminals (Claire, 2011). The objective of computer forensics can be defined as carrying out a prearranged investigation while keeping a record of chain of evidence to determine closely what happened on a computer and who was behind all this. The main concern of computer forensics is precision. Forensic practitioners should pursue firm guiding principles and uphold the uppermost principles of work ethic to attain precision because stress must be on evidential honesty and safety.

Discussion

Every investigation requires an initial contact that serves as the basis for overall progress. The process will start by contacting the investigation officer for a possible investigation. After that, the investigating team will utilize any information provided by an Incident Response (IR) team (if provided). In most usual cases, the extracted information in this regard is the list of incident Point of Contacts, Incident Assessment, and an Incident Investigation Report (King, 2006). The provided details will be helpful for the investigating team to conduct the investigation. In case such details are not made available by an IR team then the investigating team should be ready to gather information from discussion to get adequate information to be able to lead a Preliminary Investigation Discussion meeting. This discussion will allow clients and managements to provide any recognizing ideas or facts, their requirements from the investigation, and tell about the computers that are to be investigated. The list of information is not confined to these descriptions only, but it enhances as much information is revealed to the team. Investigation team should provide a rough estimate to the client regarding the time and resources that will be utilized. After an introduction report including all the initial details, estimated time and cost, and type of investigation ...