From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Forensic process

Forensic process

- In this lesson, we're going to discuss the forensic process. When you're conducting a forensic analysis, this is usually done for one of two reasons. Either you're collecting evidence as part of a legal proceeding or criminal investigation, or you're conducting forensic analysis internally to support your organization, such as determining what caused a particular incident. If you're conducting a criminal investigation, then the forensic investigator has to be qualified to the standards set forth by your jurisdiction and conduct all the investigations using sound digital forensic procedures and techniques. If, on the other hand, you're conducting forensic analysis internally for your organization, those requirements are not nearly as strict. In general, both types of forensic investigators are going to use the same tools and techniques. It's just the qualifications and the documentation procedures that are handled differently. When conducting a forensic investigation, there are four…

Contents