A brief Intro to Digital Forensics

A brief Intro to Digital Forensics

• 1.
  DIGITAL FORENSICS BCA (3rd year) ByRiya Roll no. 4936
• 2.
  Introduction History ForensicsVsDigitalForensics Formaldefinition NeedandImportance StepsInvolved Example Types&Tools Pros&Cons Conclusion References ThanksNote
• 3.
  Digital Forensics (D.F.)is a rapidly growing field that involves the recovery, analysis, and presentation of digital evidence in legal investigations. As more and more of our lives are conducted in the digital realm, the need for skilled digital forensics experts has become increasingly important. In this presentation, we will explore the basics of digital forensics, including the tools and techniques used to gather and analyze digital evidence with an example. We will also discuss some of the important key aspects of DNA in forensics. At last, we will discuss the pros and cons of digital forensics.
• 4.
  HISTORY| SCIENTISTS INVENTIONS &DISCOVERIES Alphonse Bertillon SYSTEM OF ANTHROPOMETRY It involves measuring various parts of the body to create a unique identifier for everyone. Francis Galton USE OF FINGERPRINTS Its a way to identify suspects. Edmond Locard PRINCIPLE OF EXCHANGE It states that every contact leaves a trace. Sir Alec Jeffreys DNA PROFILING It is a technique used to identify & distinguish individuals genetically. It also helps to determine their relationship to others.
• 5.
  FORENSICS • It refersto the use of scientific methods and techniques to investigate crimes. • It can refer to any type of evidence or investigation. • Examples: Analyzing DNA samples, testing blood spatter patterns, or examining bullet trajectories. DIGITAL FORENSICS • It is a specific branch of forensics that deals with the investigation of digital devices and data. • It focuses specifically on electronic evidence. • Examples: Analyzing computer hard drives, examining mobile-phone records, or reviewing social media activity to gather evidence.
• 6.
  "DIGITAL FORENSICS isthe use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation and presentation of digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal or helping to anticipate unauthorized actions shown to be disruptive to planned operations." -Dr. Gary Kessler A renowned digital forensics expert & professor at Embry-Riddle Aeronautical University.
• 7.
  Need & Importance 01 Investigation ofCyber Crimes Legal Action Support Intellectual Property Protection Risk Management Forensic Accounting Digital forensics is used to investigate cybercrimes such as hacking and cyberbullying. It can be used to deal with Copyright and Patent issue, trademark issue, and trade secret theft. It can help organizations to identify data breaches, insider threats, and other security incidents. It is used to investigate financial crimes such as money laundering, and fraud. It can help to prove or disprove allegations, as well as to locate and recover lost or deleted data. 02 03 04 05
• 8.
  It involves creatinga forensic image of the device, which is an exact copy of the digital data stored on it. Steps involved in Digital Forensics Process 01 02 03 04 05 The first step is to identify the digital devices or storage media that may contain relevant evidence. It involve using specialized software tools to recover deleted files, search for keywords or patterns, or analyze network traffic. Finally, the results of the analysis and interpretation are documented in a forensic report, which is typically presented to the investigating agency or court. Identification Analysis Preservation Interpretation Reporting Once the evidence is identified, it must be interpreted in the context of the investigation.
• 9.
  EXAMPLE 01 02 03 04 05  A companysuspects that one of their employees has been leaking sensitive information to a competitor.  The company's IT department identifies the employee's work computer as a potential source of evidence and hires a digital forensics expert to analyze it.  The expert preserves the data by creating a forensic image, then analyzes the image to identify relevant files & network activity.  The expert interprets that the employee had been emailing confidential information to an email address associated with the competitor.  The expert documents the findings in a forensic report, which is presented to the company's management & legal team as case’s evidence.
• 11.
  Pros & Consof Digital Forensics Flexibility Lost Data Recovery Business Intelligence Legal Action Support Very Expensive Time-Consuming Technical Complexity Potential for Errors
• 12.
  CONCLUSION Digital forensics isa critical tool for identifying and taking legal action against cybercrimes, recovering lost data, and protecting intellectual property. While it has many benefits, such as aiding in legal investigations and providing business intelligence, it's important to carefully consider the potential drawbacks, such as high costs and technical complexity. With the continued growth of technology, digital forensics will remain an important tool in ensuring the security and integrity of digital systems and data.
• 13.
  REFERENCES Forensics: https://www.crimemuseum.org/crime-library/forensic-investigation/definition-of-forensics Digital Forensics: https://en.wikipedia.org/wiki/Digital_forensics https://www.open.edu/openlearn/science-maths-technology/digital-forensics/content-section-4.2 Digital ForensicsTools: https://www.sciencedirect.com/science/article/abs/pii/S2666281720301864