How Digital Forensics Accesses Data Which Has Apparently Been Deleted
One of the more recent developments in the world of forensic science is that of digital forensics. This field demands the ability to examine evidence and draw conclusions and has re-defined the way the legal system operates in the Western world. Whenever forensics is mentioned, people think of the human body and all the evidence it may leave behind, usually in the form of fingerprints and other material from the body. More recently, people have started to think of the DNA testing which is still a bit controversial. There are however, many other forms of forensics.
The ability to analyze a computer system and search for data is also a form of forensics, even though it may not initially seem to be a related discipline. This branch of the science is based upon the fact that data which appears to have been deleted from a system may not actually have been erased for good. Most digital systems only erase data finally when it is overwritten by new data which needs the memory room that the old data was using up. This means it can be accessed by those who know how to reach it.
The key to discovering lost data is to understand how files are deleted from a computer system. When you delete a file on a Windows computer, it goes to the Recycle Bin. From there, you can either empty the Bin, or use software which does this as part of a clean up of unwanted files. It will appear as though the file is lost and gone forever. This is simply an illusion, as the actual data will still be in exactly the same place. All that will have happened is that the indicators in the operating system which point to the file will have been changed and then deleted.
The bytes of data which were apparently deleted remain in memory until they are overwritten by new data. This could happen within minutes, as the user creates new files which need the space, or it could never happen. The data which is believed to be deleted could survive for years unknown to the user if no other data overwrites it. A digital forensics expert can quickly access all areas of memory to see if there is anything of significance still left on the hard drive.
This technique for finding deleted data is obviously hit and miss, as there is obviously no control over what is left and what is not. It can, however, turn up some extremely useful evidence. The same system can also be applied to other electronic devices which store information, especially cell phones. When you think of the data which is stored in the typical cell phone, you can imagine how useful it would be to have access to one belonging to a criminal. Even being diligent enough to constantly erase data may not be enough to defeat digital forensics.
| URI named center of academic excellence in cybersecurity URI WAS named a National Center of Academic Excellence in Information Assurance Education by The National Security Agency and the Department of Homeland Security... | ||
Review: 'Digital Forensics for Legal Professionals' Is Essential Reading - Law.com
| ||
"Volatility On Demand": Catching A 54 Second Grand Rehearsal For A Market Crash In The Act After uncovering all the dirty HFT-related details surrounding the SEC-complicit misdirection of the May 6, 2010 flash crash, which scapegoated a plain vanilla mutual fund with a report that has been now proven to be fatally flawed, and likely fabricated on purpose, the market forensics at Nanex have now uncovered something even more disturbing. As a reminder, some time ago, Nanex discovered ... | ||
The biggest obstacle isaround community confidence in policing - Gulf Daily News
| ||
Take Our Daughters and Sons to Work Day at courthouse includes Dr. Seuss-themed mock trial MOUNT HOLLY EUR” They could have just given a dry lecture about how the criminal justice system works, but that might not have entertained the more than 100 children who visited the Burlington County Cou.. | ||
Grayson College Hosts Law Enforcement Conference DENISON,TX--Thursday, law enforcement brushed up on their skills in forensics and learned some new tricks to the trade. Grayson College held the 9th annual conference that lasted most of the day. It was.. | ||
NWC Forensics Team wins nationals - Billings Gazette
| ||
Advanced Search Tool:
It may not always be the case but you should assume the links on this website are affiliate links which means that we will be compensated if you choose to buy at some point in the near future. Please accept our thanks for your support.
Technorati Tags: Digital Forensics, Jobs In Forensics, Forensics

