26 - Digital Forensics

Question 1

What is Digital Forensics?

Answer 1

• The application of science to reconstruct a sequence of events involving computers and information
• We can figure out after the fact what happened in an information system.

Question 2

What are the three stages of Digital Forensics?

Answer 2

1. Acquisition
2. Analysis
3. Reporting

Question 3

What is Locard’s Exhange Principle?

Answer 3

States that everywhere you go:

1. You take something with you
2. You leave something behind