What is the tasks and implications of computer forensics

Welcome to Forensic Focus.

Tasks? Imaging, analysis and presentation (in a court of law) are the main aspects of a typical computer forensic investigation. There are many other potential tasks though…network monitoring, advice on how to prepare for an investigation, etc.

Implications? Not sure what you mean.

Jamie

Hi,all

I mean and I would like to know more about

- what is the tasks and implication of reactive computer forensics?

- How can computer forensics be used in a proactive role?

as above two questions that I need to know more about computer forensics..

Thank you your help

With regard to computer forensics in a proactive role I would suggest that preparing for a potential investigation would come under that heading. Some aspects to consider might be:

- Policies and training
- Auditing and logging procedures
- Backup procedures
- etc.

i.e. all the things most of us wish we'd thought of before but didn't!

Not sure if this is what you mean, but computer forensic procedures can be used proactively to test other information security tools. For example, if a piece of software claims it can wipe a drive so that data can't be recovered, you can use forensic techniques to verify whether it works as advertised. You could test encryption products in the same way, to make sure that unencrypted copies of the data can't be recovered.

Similarly, if your corporate policy is that users shouldn't store sensitive data on their local drives, you can use forensic techniques to verify that the users are following the policy.