Cyber Forensics is defined as the process of preservation, identification, extraction, and documentation of computer evidence which can be used by the court of law. It is a science of finding evidence from digital media like a computer, mobile phone, server, or network. It provides the forensic team with the best techniques and tools to solve complicated digital-related cases. Due to increases in attacks against systems, states, and consumer products, companies like organizations and governments have taken security more seriously.
Prior to the 1970s crimes involving computers were dealt with using existing laws. The first computer crimes were recognized in the 1978 Florida Computer Crimes Act, which included legislation against the unauthorized modification or deletion of data on a computer system. One of the first practical examples of digital forensics was Cliff Stoll’s pursuit of hacker Markus Hess in 1986. Since the late 1990s mobile devices have become more widely available, advancing beyond simple communication devices, and have been found to be rich forms of information, even for crime not traditionally associated with digital forensics.
The tools of cyber forensic investigation are X- Ways WinHex, First on Scene, Rifiuti, Pasco, Galleta/Cookie, Forensic Acquisition Utilities, NMap, Ethereal, BinText, Encrypted disk detector, MemGator. Rifiuti is a tool which helps in finding the last details of a system's recycle bin. It helps in collecting all the deleted and undeleted files. Pasco is a Latin word meaning browse.
We are in the digital world. We need to know who and how we are being attacked digitally. Therefore, we need to know our security, safety, and privacy features while using safe browsing. When we click on any link, be sure it is related to us and verify twice. Never respond to any email if find unusual. Business organizations need to follow IT principles. They must educate their employees on what to do if any suspicious activity is recognized. This is not for only the recognition of suspects, but they need to know what actions put them in a dangerous zone. A forensic department is required in case of failure of cybersecurity. Digital forensics help to get evidence and can be produced before a court. This evidence will punish the culprit.
