Computer Forensics: You can run but you can't hide

This document discusses digital forensics and incident response (DFIR). It covers the key phases of digital forensics like identification, acquisition, preservation, analysis and dissemination. Acquisition involves collecting evidence from various sources like mobile devices, cloud storage and game consoles. Preservation of the evidence is critical following techniques like write blocking. Analysis techniques are discussed like recovering deleted data and analyzing file system metadata. The challenges of DFIR are also covered like virtual machines, network forensics and issues with the cloud. The document ends emphasizing the importance of ethics, certification and keeping up with new tools and techniques in this field.