Forensics Definitions Flashcards
Forensic
use or application of scientific knowledge to a point of law, especially as it applies to the investigation of crime.
Computer Forensics
scientific examination, analysis and/or evaluation of digital evidence in legal matters
Acquisition
digital evidence is duplicated, copied or imaged
Original Evidence
physical items and the data objects that are associated with those items at the time of the seizure
Examination
technical review that makes the evidence visible and suitable for analysis; tests performed on the evidence to determine the presence or absence of specific data
Data Extraction
process that identifies and recovers information that may not be immediately apparent
Analysis
to look at the results of an examination for its significance and probative value to the case
Data Analysis
the assessment of the information contained within the media
Digital Evidence
information stored or transmitted in binary form that may be relied on in court
Chain of Custody
chronological documentation of the movement, location and possession of evidence
basic input output system
set of routines stored in read-only memory that enables the computer to start the operating system and to communicate with various devices in the system
archiving
process of storing data in a manner that is suitable for long-term availability and retrieval
file slack
the data between the logical end of the file and the end of the last storage unit
free space
Data storage areas available for use by the computer. The area may already contain previously stored information. Also referred to as Unallocated Space
unallocated space
data storage units available for use by the computer (may already contain previously stored info)
