What Does Cyberforensics Mean?
Cyberforensics is an electronic discovery technique used to determine and reveal technical criminal evidence. It often involves extracting data from local and/or cloud storage to electronic to establish a chain of evidence for legal process purposes.
In tech lingo, the concept of reverse engineering may also be referred to as computer forensics or digital forensics. In this more general context, the term is used to describe an investigation that disassembles and analyzes code to determine where code broke (debugging) or understand how a cybersecurity exploit was carried out.
Techopedia Explains Cyberforensics
Cybercrimes cover a broad spectrum, from email scams to downloading copyrighted works for distribution, and are fueled by a desire to profit from another person's intellectual property or private information.
Cyberforensic techniques include:
- Cross-driven analysis that correlates data from multiple hard drives, network resources and cloud services.
- Live analysis, which obtains data acquisitions before a PC or other digital device is shut down.
- Deleted file recovery.
