ABSTRACT

Beginning in the 1980s, cyberforensics is a multidisciplinary field that facilitates the review of data sets to generate a factual or opinion-based presentation to stakeholders. Cyberforensics found its roots from investigations of cybercrimes and branched into nearly every facet of professional and personal lives. Cyberforensics consists of five key phases: acquisition, storage, identification, analysis, and presentation. This entry reviews the five key phases and introduces the history of the field, the tools, and additional resources.