What Is Digital Forensics?

This chapter introduces the concept of digital forensicsDigital forensics and provides a discussion of what computer forensics is, examining data in order to reconstruct what happened in a digital environment. Further, the chapter discusses the steps involved in a forensic examinationExamination in a digital environment, from collectingCollecting evidence to reportingReporting on the findings of the examinationExamination. Common constraints and processes handled during a forensics examinationExamination are also introduced. Emphasis is put on making the reader understand the reason for a computer forensic examinationExamination and the fact computer forensics follows the same rules and regulations as traditional forensic disciplines. The fact that a forensic examinationExamination is commonly initiated for a reason, answering some question, is also described. The aim of the chapter is to provide the reader with a brief and non-technical overview of the subject. As such, the chapter can be read and understood without any technical knowledge.