The capture, recovery and analysis of electronic dat from digital devices for the purpose of investigating a crime and assistance in the prosecution of the crime

Practitioner vs Professional

Practitioner

  • A person engaged inn the practice of a profession
  • A person who practices something specific

Professional

  • A person who earns a living in an occupation frequently engaged in by amateurs
  • A person who is an expert at his or her work

Training

  • University
  • Vendor training
  • SANS course
  • On the job training
  • Investigation license

Skills

  • Computer and network fundamentals
  • Understand the forensics process
  • Problem solving skills
  • Understanding of the legal requirements
  • Ethics
  • Mindset to question

Experience

  • Law enforcement
  • Government agencies
  • Large financial firms
  • Large corporations
  • Boutique forensics firms
  • Research and academia
  • Data recovery specialists

Soundness

Digital evidence is said to be forensically sound if it was collected, analysed, handled and stored in a manner that is acceptable by the law, and there is reasonable evidence to prove so. Forensic soundness gives reasonable assurance that digital evidence was not corrupted or destroyed during investigative processes whether on purpose or by accident.
- Research on Digital Crime, Cyberspace Security, and Information Assurance 2014