ABSTRACT

Computer forensics is a digital forensic division that basically deals with crimes that have been committed across various computing devices such as networks, computers, digital storage media etc. It mainly refers to a set of different methodological procedures and techniques to identify, gather, preserve, extract, interpret, document, and present the evidences from the computing equipment in such a manner that the discovered evidence/equipment is acceptable in the court of law. This chapter inspects the origin of science and scientific methods to shape the core premises for setting up measures to evaluate digital forensic as a science and hence justifying the use of digital forensic tools and their feasibility towards cybercrime. This chapter also describes the working framework of different sectors of digital forensics and their challenges while analyzing cybercrime cases. Described controlled frameworks have the potential to minimize the error and challenges in digital forensics and their various categories.