Question

Explain the characteristics of a computer forensic analysis.

Answer 1

Forensics - The use of science and technology to investigate and establish facts in criminal or civil courts of law.
Computer Forensics - Commonly defined as the collection, preservation, analysis and ourt presentation of computer-related evidence.

Characterstics:

The collection and search of specific
data that will serve as acceptable evidence
in a court of law.
 Computer Forensics deals with:
 storage media (e.g. hard disks),
 the examination and analysis of network
Incidents
any security relevant that might threaten the security of a computer system or a network.
 An must have observable and recordable characteristics:
 The connection to a system via a network,
 The file access,
 System shutdown, etc