Forensic

Definition: Forensic is really a legal term. At its root it means something that is worthy of discussing in a court of law or that is related to the application of knowledge to a legal problem. It has been glorified in TV shows like CSI (Crime Scene Investigator) where they use various forms of chemical, pathological and other forensic sciences to gather information to determine how a crime occurred.

In computer terms, forensic is used to describe the science (or art) of extracting and gathering data from a computer to determine how an intrusion occurred, when it occurred and who the intruder was. Organizations that employ good security practices and maintain logs of network and file access are able to accomplish this much easier. But, with the right knowledge and the right tools forensic evidence can be extracted even from burned, water-logged or physically damaged computer systems.

Also Known As: Computer Forensics, Network Forensics, Cyber Forensics

About
Latest Posts

Tony Bradley

Editor-in-Chief at TechSpective

I have a passion for technology and gadgets--with a focus on Microsoft and security--and a desire to help others understand how technology can affect or improve their lives. I also love spending time with my wife, 7 kids, 4 dogs, 7 cats, a pot-bellied pig, and sulcata tortoise, and I like to think I enjoy reading and golf even though I never find time for either. You can contact me directly at tony@xpective.net. For more from me, you can follow me on Twitter, Facebook, Instagram and LinkedIn.

Related Posts