Digital Forensics As An Investigative Approach by Milind Shah
Digital Forensics: An Investigative Approach - A Handbookon How to Use Digital Forensics Tools
Digital forensics (sometimes known as digital forensic science) is a branch of forensic science encompassing the recovery and investigation of material found in digital devices, often in relation to computer crime. The term digital forensic was originally used as a synonym for computer forensic, but has extended to cover investigation of all devices capable of storing digital data.
With roots in the personal computing revolution of the late 1970s and early 1980s, the discipline evolved in a haphazard manner during 1990s, and it was not until the early 21st century that national policies emerged. Forensic may also feature in the private sector; such as during internal corporate investigations on intrusion investigation.
The most common use is to support or refute a hypothesis before criminal or civil courts. Criminal cases involve the alleged breaking of laws that are defined by legislation and that are enforced by the police and prosecuted by the state.