Vikmall.com

We often see Hollywood movies using the term “hack” into extremes. Most often in crime and action thrillers it gets pretty much blamed for anything. It may make other people paranoid in using their computers but professionals are aware that most of them are impossible.

Company owners are very confident in their security systems. Unfortunately most offenders are the employees themselves. Who can better cause a breach of security other than someone who knows the about the company’s network.
Once this situation arises, you can opt to hire a forensic expert.

Before you call for a computer forensic expert or company what do you do? You can also play a part in making sure that the situation will be addressed properly. Its common knowledge that once is tampered or damaged it will be inadmissible in the court of law. Before the investigation commences you can help make sure that there is evidence in the computer.
What to do in a computer crime scene

First you have to make sure that the computer system involved is not used. Leave the computer system the way it is either on or off. If the computer is turned off with the standard shutdown mode, data can be lost. Turning it on the other hand changes the slack file space, temporary files and caches. This causes the data to become altered. If the evidence is anyway tampered it will be accepted in the court of law.

Do not send your IT personnel to handle the matter. They may be able to collect data but they do not have knowledge in evidence techniques. They may be able to collect data but this will also change the information at hand.

Computer forensics do not just collect data but they also preserve and thoroughly examine the computer and its contents while following standard legal procedures in handling evidence. Any evidence must comply with the standards of the law so that it will be accepted in court.

If you already have the data but you are not sure if it does contain evidence you can call a computer forensic expert or company. Some companies offer a quick analysis to know if the computer system has indeed been used for a criminal act. They can collect the data on site while others require you to ship the hard drive to them.

The hard drive can be taken out by an IT employee, put in an antistatic bag, taped securely, bubble wrapped, placed in a box then shipped. You may have to call the company first before you ship them.

Letting your IT personnel make a preliminary investigation will change the data. If there is evidence found in the said computer then it has already been tampered with and cannot be used in the court. Computer forensic experts are both trained in the technical matters computer science and standard legal procedures required in court.

Computer forensic experts hire by the hour and the total costs will depend on the nature of your case. After collecting and examining the said data, the analyst will make a report. They can also be used as expert witnesses if it leads to a litigation and prosecution.

It’s important to think first thoroughly about the situation rather estimating future costs. Hiring outside experts is considerably less than the internal costs that will caused by the problem.

Author : Zul Affandy
Article From http://www.vikmall.com

Computer forensics is one the fields today which often gets updated. Many agencies have found the application of computer forensics very useful especially in the investigation of fraudulent actions and crimes. More so, computer forensics is the procedure that is applied when electronic devices such as the computer media is placed under careful investigation.

The process involves the discovery and analysis of any available data whether they have been hidden or deleted. These are among the evidences that will support the defense and claim of a particular individual or company as they file for any legal action.

Moreover, computer forensics specialists use the tools that recover both the accidentally and intentionally erased files and information. So whether the loss of the data is blamed to the untoward occurrences of hardware failure, there is a better chance of recuperating them. One of the biggest computer forensics problems though is how to retain the original data without the slightest alteration in them.

So much to say, even during the process of shutting down the computer system to transfer the data into another media may cause changes in them. It is important that the computer forensics expert has the skill to maintain the exact form of the data. Nobody can exactly say when the data may be altered but with the most apt tool and the specialist’s skills, it can be possibly prevented.

Computer forensics attracted the attention of the public during the height of the Enron scandal which prompted the widest-ranging computer forensics investigation marked in the world’s history. As computers these days are becoming an integral part of human life, big quantities of data are being stored in these electronic devices.

More so, crimes and other fraudulent acts are likewise increasing in intervals. Computer forensics investigations are also done in emails, websites visited, chat histories, and many other forms of electronic communications.

The advances in today’s technology have shaped the improvement of computer forensics. The developers continually upgrade their tools to meet the increasing intensities of computer forensics problems. Modern software and tools are coming out into the market which nonetheless makes the task easier for the computer forensics experts. Thus, data is found and restored faster and with more preciseness.

These evidences need to be in their original format especially when they are to be used as evidences in the court. These proofs are often gathered from all kinds of computer media such as the discs, Pen drives, tapes, memory sticks, logs, emails, PDAs, handhelds, deleted information, and hidden documents.

The people’s common notion is that when the data is deleted from its location, the file is already completely deleted and unfound. This makes you wrong though. Upon deletion, what is erased is only that of the data’s reference location but the actual document remains intact in your computer system.

It is easiest to tell that the data have been deleted but the common computer forensics problem is where and how to find it and how to recover them without making traces of changes. Thus, the solution to the dilemma will entirely depend on the computer forensics professional’s skills.

Computer data security is very important so it is also significant that they remain original. Part of the training of these professionals includes the molding of their skills to be careful when handling the recovery of the data at all times.

However, it is not for them to conclude when data may be altered or not. This remains as one of the top computer forensics problems to date.

Author : Zul Affandy
Article From http://www.vikmall.com

Computers have radically changed the way we live your lives. Everyday living as become easier and technologically advanced decades ago. It has changed the way we work and the way we live in our houses. Children to day are sometimes even more technologically aware than their parents. Mobiles phones have gotten smaller and laptops have gotten slimmer.

With the launch of the Iphone that used the touch screen technology it will only be a matter of time when this idea permeates into other devices and appliances. Unfortunately, technology also makes it easier for criminals to their dirty job. However, computer forensics makes sure that technology is put to lawful use.

Everyone keeps up with the times, even the criminals. The internet is a public place which makes it vulnerable for fraud. Criminals often take advantage of unsuspecting victims. Law enforcement agencies have incorporated computer science in their investigation process to aid them with computer savvy criminals.

Crime and computers

We have seen a lot of Hollywood movies about hackers stealing from financial institutions. We have also seen two parties making their deals through bank transfers with a bunch of computers. Although these are not possible in real life, there are other ways that criminals can use computers.

Computer forensics is basically applying computer science to assist in the legal process. It entails the technological and systematic inspection of the contents of a computer system for evidence. Individuals in this field are called by different titles such as digital media analyst or computer forensics investigator. These people scanned a computer thoroughly to find out if they have used for a civil wrongdoing or criminal act.

The skills required are more than just normal data collection and using preservation techniques. Other definitions include the use of special tools to meet the Court’s criteria and not just a thorough examination of a computer for potential evidence. This definition is similar to Electric Evidentiary Recovery or e-discovery.

Most of the time computer forensic investigators investigate hard drives, portable data devices and data storage devices. These devices include USB Drives, Micro Drives and external Drives.

The first task of the computer forensic investigator is to find sources of documentary or digital evidence. The next step would be to preserve the evidence so that it could be analyzed later on. When dealing with computer systems, important files or data can be quickly lost.

The investigator should take the necessary test because data retrieval can be time consuming and costly. The investigator would then analyze the collected data for potential and supportive evidence. The final step would be presenting the findings. The investigator will render his opinion based on the examination and make a report.

The process of using computer forensics must comply with the standards of evidence that are acceptable in court. This field is both technical and legal. The investigator should also have a complete understanding of the suspect’s level of sophistication. If they don’t the suspects are assumed to be experts.

Investigators then presume that the criminal have installed a countermeasure to render forensic techniques useless. The computer will then be shutdown completely to prohibit the machine from making further modifications to its drives.

Computer technology has changed the way we live, work, and for others - commit crime. Although the internet may seem like a very convenient place users should always be wary for seemingly innocent offers.  

Author : Zul Affandy
Article From http://www.vikmall.com

We have always heard of the word “hack”. Its mostly used in related to computers and gets blamed for everything bad that happens in futuristic crime action movie. Most of these are not entirely true but network systems do get hacked. Most companies are confident of what their IT department is capable off.

However that does not mean that an employee can not be tempted to do a little snooping of his own. Most of the time offenders are within the company itself. The accessibility of the internet also poses a problem. Anyone can be anything online. This is why fraud, phishing, and identity theft happen.

The computer is an important part of our lives. Sending letters have been entirely changed through emails. Communications have been dominated by instant messaging and texts. Portable storage devices that were only known to IT professionals are now used by the general public. We already have an idea of what computer forensics is but what does happen in a typical investigation?
The computer crime scene

First like any other investigation would start, the location is regarded as a crime scene. The computer analyst will take digital photographs and secure documentary evidence. This includes printouts, notes and disks in the scene. If you have hired a computer forensic expert you should leave everything to them. The computer system should left as it is whether it is turned on or off.

If the computer is turned on the computer analyst will gather all the information that he can from the running applications. It will then be shutdown in a way that the data will not be lost. Doing a standard shutdown or pulling the plug is not an option. Both of these methods may cause the lost or damage of the data in the computer system.

The computer forensic analyst then documents the configuration of the system. This will include the order of hard drives, modem, LAN, storage subsystems, cable connections, and wireless networking hardware. The analyst will take digital photographs and make a diagram. They will also take portable storage devices within the area that may contain substantial evidence.

After that the hard drive will be taken to the lab. It’s not suitable to examine data in the same hardware. Offenders who engage in cyber crimes are also aware that important data can be retrieved to convict them. Countermeasures, viruses and booby traps may be installed in the system to damage electronic evidence.

Analysts take the hard drive in their lab instead to make an exact duplicate of its contents. This process is called Imaging. Analysts have their own tools to make sure that the data is copied completely and accurately.

The duplicate will then be verified by an algorithm. The data is then examined and analyzed. The analyst makes a report containing his findings and all that was done during the investigation starting from the acquisition of the data. The evidence that will be found will be presented in court of prosecution takes place.

The analyst will be an expert witness to present his findings. The most important thing about computer forensic experts is that they are trained in handling evidence. Any IT professional can extract data but they will not be able to preserve it.

The legal aspect of the field makes it different and therefore important. 

Author : Zul Affandy
Article From http://www.vikmall.com

Computer forensics jobs are numerous, so to speak. It is one of the careers that is placed on a pedestal. Well, we can’t absolutely say that there are only a few people who opt to take up computer forensics training but it is safer to assume that there are a lot of opportunities available.

Businesses, corporations, military, law enforcement, and other intelligence agencies are mainly employing computer forensics investigators because they can help out in their attempt to solve crimes. More so, the range of computer forensics jobs is skyrocketing in response to the tantamount range of computer-related crimes.

In the past years, computer crimes were not that popular. Yet, with the advent of the technological advances particularly in line with the use of computers, the computer-related wrongdoings constantly heightened. These crimes are nevertheless facts to be dealt with by all branches of the law enforcement agencies.

That is why; computer forensics experts are much needed. After all, computer forensics popularized after the tedious labor exerted to solve the Enron scandal.
Computer Forensics at Work

In handling crimes, the investigators need to fully scan the computers to detect any fraud, illegal, and other unauthorized behaviors. The investigators should nonetheless be experts who have the basis of knowledge in handling such cases. Computer forensics jobs require that the qualified applicants have the profound certification programs, credentials, and on-the-job experience. The tasks are not to be belittled because they require real dedication and hands-on work.

The computer forensics specialists are known by a lot of titles or names. They include computer forensic investigators, digital forensics detectives, and digital media analysts, to name a few. The career description is all about the investigation or examination of the data placed in any form of digital media.

Lucrative wages are offered at stake for the qualified persons. Private firms of course give out higher salaries. But the compensation given by the law enforcement agencies ranges between $85,000 up to $120,000 annually. The determining factors are by and large one’s experience and skills.

Meanwhile, a graduate of computer forensics has all of the means of making advances in his career. He can be employed as an agency’s forensic team leader or even a bureau supervisor provided that he has the capacity to fulfill the requirements of the computer forensics job. To date, fifty percent of the jobs available in the Federal Bureau of Investigation look into the applications for computer forensics investigators.

Also, another computer forensics job is by being a consultant. This depicts one who works freely and independently. As a computer forensics consultant, you can partake in various assignments and charge large sums based on the time that you have to spend for the task. Consultants charge their clients on an hourly basis. The fees usually range in between $375 up to $600 per hour.

More and more people will demand for the assurance that their contact with the computer network will not be put at risk. Or if it does, they can turn to someone who is qualified to solve their ordeals. What are you waiting for? It is time that you start off with your steps in realizing a career with computer forensics.

In the coming years and with the course of the advances in technology, it is certain to assume that computer forensics jobs will continue to increase. Thus, more opportunities await the computer forensic professionals.

Author : Zul Affandy
Article From http://www.vikmall.com

When we hear forensics we have envision detectives dusting off prints in a crime scene. When we hear computer forensics we imagine guys in a lab coat examining a computer in a lab. This may be true but the uses of computer forensics are wide and varied.

They are not just used in law enforcement and criminal matter. Computers have become an important part of our lives. Most of the time they contain important information than can turn into a piece of evidence.

Technology is continually developing which means that information is the next valuable commodity. Most business stores their confidential information in computer systems which make them the target for hackers. Hacking is a possible threat. Security technologies continue develop so do criminals who are bent on cracking them.
The purpose of computer forensics

The main purpose of computer forensics is examining a computer system to find if it has been used for a criminal act. All of its contents are thoroughly analyzed to find out if it contains substantial or supportive evidence. The entire investigation is not as easy as it is portrayed in television shows.

Computer forensic analysts have to follow a set of procedures to be able to comply with the standards of evidence. If they not follow legal procedures the evidence will considered inadmissible in court.

Computers are used in a variety of purposes. Most often this hardware contains pertinent information. Computer forensic experts can trace emails, instant messages and computer related communication. They can examine portable storage devices that may contain evidence. They can find out when, who and what happened by acquiring and analyzing data.

It can be used if a company network’s security is breached. Almost all businesses nowadays store important and confidential information in their computer system. Computer forensic analysts will able to detect if someone has disclosed corporate information. In these cases they can be either accidental or intentional.

Million of dollars have been lost due to sabotage and employee theft. They can also find out if there has been a case of industrial espionage. Competition has always been stiff in any industry and with the technology today some use it to get ahead.

In general cases, criminals often store or leave traces of information in their computers.

It is applicable in deception cases such as counterfeiting. It has also been important in playing a part of finding evidence for phishing which is very common. Analysts are able to track down child pornography by tracing buy and sell activities online.  It has played a part in many cases from corporate fraud to threats in national security.

We may not know but exchanging information through the internet can also be used against us. The internet is a public place which makes it vulnerable to scams that prey on unsuspecting victims. Information now has become a valuable commodity. Criminals nowadays are able to hack into computer systems.

It can also be applied in cases wherein relevant information is needed. Analysts can obtain information from an opposing party. In most criminal cases they can examine computer system even without the consent of the owner.

Information is becoming more readily available nowadays. As computers become more important to us it will continually become targets by criminals and offenders. Computer forensics enables us to keep with the rising cyber crimes.

Author : Zul Affandy
Article From http://www.vikmall.com

What is computer forensics investigation? How can it help solve crimes?

The news in the broadsheets, television, and radio about various crimes such as murder, holdup, thieving, and the likes are no longer new to us. Crimes happen here and there. We can’t say that we can’t fall as the next victims. In the past years, computer forensic investigation had earned a remarkable commendation particularly in line with solving crimes.

The then Enron scandal signaled the start of the glories of computer forensics. To date, a lot of intelligence, law enforcement, military, and business agencies rely on this field in the hope of speeding up the process of solving any malicious scandal done to other individuals or within the firms themselves.

Computer forensics is the scientific study that deals with computers and the related facts in connection with an investigation done by any law enforcement firm for the purpose of presenting the evidences in the court. This branch of study has existed for an innumerable number of decades and perhaps it is of the same age with the presence of computers.

However, thanks to the advantages in the modern technology because computer forensics investigation is placed onto a much higher level. Revisions and upgrades are constantly applied to the field of computer forensics.
Old Time Computer Forensics at a Glance

In the past years when technology was not yet that modern, computer forensics was much known for data dumps. The procedure was too hard and slow because all of the keystrokes were to be printed out in eight digits. However, those digits were all zeroes and then ones. The materials used in printing out the data were cases of paper.

Needless to say, the systems analysts were required to convert the information into hex and then to translate their values into the actual information keystroke. The entire procedure permitted the investigators to go through all of the information at hand and specify at which point did the program and the computer system packed up.

In the olden days, computer forensics had gone through a variety of ups and downs. But of course, it is important to note that those are the things of the past. Nowadays, the said field has a brighter future ahead of it. In fact, computer forensics investigation is the known way of providing an in-depth examination to solve series of crimes and other deceitful actions.

Indeed, the computer language still ranges from the zeros to ones or those hex and binary but these days, everything is already being upgraded. The same thing goes around with the process of computer forensics investigation. The developers of the tools are keeping up with the competition. For now, computer forensics investigators are able to retrieve any wiped off data.

These specialists are the people who are capable of reconstructing the lost data either they have been intentionally or accidentally erased from the computer’s hard drive. They are moreover overly familiar with the science of computer forensics and the construction of digital technology.

Computer forensics investigation digs deeper into all electronic files. You can trust the investigators to collect and examine the data from the emails, chat histories, and other communications done using the computer.

The military, law enforcement, and other intelligence companies are making use of this field in uncovering whatever evidence may be used to file for a legal action before the court of law. This is very significant especially now that many crimes remain unsolved.

Author : Zul Affandy
Article From http://www.vikmall.com

Computer forensics has been garnering a lot if interest due to the increase of cyber crimes. The need for computer forensic experts is steadily increasing. As the technology continues to develop criminals and offenders find a way to catch up. The Computer has become an important part of your lives.

It has changed the way we work and live. This is why it has become the target of criminals and offenders. Computer forensics helps combat crimes. It is also necessary for them to avoid mistakes and make sure that they do their job. Fortunately a computer forensic toolkit is available to make sure that they got all the bases covered.  

Computer forensics is complex. It needs careful preparation and procedures must be followed diligently. It may look easy in television but computer forensics takes a lot steps. If any of these steps are missed the evidence can be tampered. The evidence will be inadmissible in court and the computer forensic analyst may face a lawsuit.

The right tools for the right job

Like any other job we need the right tools for it. These tools are important to be able to do your job well and avoid mistakes as much as possible. If you’re a computer forensic expert you cannot afford to make a mistake. Any evidence should be handled carefully and properly.

Any IT professional can retrieve data but they are not trained in evidence techniques that are necessary for the job. In most cases the computer system is taken from owners even though they have provided consent. If the data and the machine are compromised the computer forensic analyst may face a lawsuit.

The computer forensic toolkit reduces the risk of making mistakes while doing your investigation. It also serves as a guide and framework to be able to have a smooth investigation. It also serves as en educational guide for newcomers that will provide the technical and legal know how to a forensic investigation.

A computer forensics toolkit is available online. Unfortunately it not free and costs $199. It’s a comprehensive guide for both the beginner and the veteran. To keep with the continuing changes in the technology tools such as these are important for a faster and more efficient forensic investigation. Computer forensics is not exactly one of those jobs wherein you can erase your mistake and begin over.

The whole tool kit can be viewed in MS word format for easier reading. The first part of the toolkit is the Introduction and Guide. It contains a comprehensive overview of computer forensics with an outline for the whole procedure. The next is Management Presentation. It is followed by forensics report template which provides a guide in making consistent reports.

Essential Forensics Forms, as the name suggests contains all requisite forms for documentation. Manuals and Procedures contain all the steps done in the forensic laboratory.  Forensic glossary contains all the terms. Forensic resources contain the FAQ, cost estimator, case studies and valuable tips.

There’s checklist to keep track of your progress. The last but not the least is the Tool Reference Catalog which contains the list of documents and software tools that you need.

The toolkit will provide the know how for any newcomer and a reviewer for the veteran. Every analyst should keep abreast with the times to make sure that the criminals won’t overtake them.

Author : Zul Affandy
Article From http://www.vikmall.com

Computer forensics has become an important of litigation. Computers have become an important part of your lives. This does not exclude criminals who have the technical know how of hacking into computer network systems. Electronic evidence has played a role in court but obtaining can be difficult.

There have been issues of authenticity concerned with this type of evidence. Nonetheless it still used today with the help of legal standards to make them admissible in court. Computer forensics is beneficial but it also has disadvantages.

Computers are the most dominant form of technology. It has been used in variety of purposes which has made digital and electronic evidence important. However there are still setbacks to this field.

Pros and Cons

The exchange of information is taking place everyday over the internet. Although this may be convenient for us, it can also pose as an opportunity for criminals. Phishing, corporate fraud, intellectual property disputes, theft, breach of contract and asset recovery are some of the situations wherein computer forensics can be used.

Apart from the technical aspect, legal issues are also involved. Computer forensic analysts make their investigation in such a way that the electronic evidence will be admissible in court.

There are advantages and disadvantages when it comes to computer forensics. This field is relatively new and criminal matters usually dealt with physical evidences. This makes electronic evidence something very new. Fortunately it has been a helpful tool wherein important data needed for a case that has been lost, deleted or damaged can be retrieved.

Computer forensics’ main advantage is its ability to search and analyze a mountain of data quickly and efficiently. They can search keywords in a hard drive in different languages which is beneficial since cyber crimes can easily cross borders through the internet.

Valuable data that has been lost and deleted by offenders can be retrieved which becomes substantial evidence in court. Legal professionals are able to produce data in court that were previously impossible.

The first setback when using electronic or digital evidence is making it admissible in court. Data can be easily modified. Analyst must be bale to fully comply with standards of evidence required in the court of law. The computer forensic analyst must show that the data is tampered.

His or her own investigation must also be fully documented and accounted for. Computer forensics must also training of legal standard procedures when handling evidence.

The main disadvantage is the cost of when retrieving data. Computer forensic experts hire per hour. Analysis and reporting of data can take as long as 15 hours but it will also depend on the nature of the case. Another one is that when retrieving data, analyst may inadvertently disclose privilege documents.

Legal practitioners involved in the case must also have knowledge of computer forensics. If not they will not be able to cross examine an expert witness. This also applies to the judge, solicitors and barristers. Computer forensics is still fairly new and some may not understand it. The analyst must be able to communicate his findings in a way that everyone will understand.

Although computer forensics has its disadvantage, this can be solved by the party involved. Evidence on the other hand can only be captured once. The use of computers and the rise of cyber crimes also call for an equally high the method of stopping it.

Author : Zul Affandy
Article From http://www.vikmall.com

Thanks to television shows most of us already have an idea of what forensics is. Although some scenes are not depicted correctly (examining specimens are more exhausting and mentally draining due to the constant demand for paying attention to details, they don’t look as easy as they are in television with swooping camera angles) they have given us an idea on what they do in collecting evidence.

Computer forensics is part of this investigation. Due to the higher incidence of cyber crimes they are now an essential part of the legal process.

We already have an idea on what they do. However a computer forensics job entails a lot of procedures and expertise. Like any other evidence electronic data can also be fragile and damaged.  There are certain steps to be followed to ensure that the data will be collected without being tampered.
A day in the work of a computer forensic analyst

The first thing that an analyst will do is to secure the data and the machine. The data can never be analyzed in the same system that it came from so exact copies are made. Usually the data in a hard drive is duplicated to extract the information needed.

The collection process starts when the analyst examines the surroundings of the machine. Other physical evidence such as notes, disks and printouts are also taken. Photographs of the surroundings are also taken. The area is also examined for portable storage devices.

If the computer system is still operating the information will be collected by examining its applications. Computers that are used for illegal communications may not have all of the data stored in the hard drive. Information stored in Random Access Memory will be lost if the computer is shut down so this step is important.

Open source tools are used to analyze on live computers. Analysts can also obtain an image of mapped drives and encrypted containers while they are on. The data from network connections are captured first, then running applications, and lastly from the Random Access Memory.

The computer is then shut off carefully in a way that it will not loose any data. The method used will depend in the computer and the operating system it uses. If proper shut down is made volatile data can be lost. Pulling the plug is not advisable either because it may corrupt the file system and loose important data.

The analyst then inspects for trap and photographs the configuration of the system. A diagram will also be made including serial number and markings.

The analyst then makes an exact duplicate of the hard drive called Imaging. They often use hard drive duplicators or software imaging tools. This is done in sector levels to make bit-stream copies of ever part that is accessible to the user which can store data.

The original hard drive is then installed with a hardware write protection and sent to a secure storage. After making a complete and accurate copy the duplicated data can now be analyzed for evidence. Analysts use algorithm to make sure that the imaging process is verified. Two algorithms are generally used in this process.

The analyst then renders his opinion then documents everything that was done. A report is made that contains all the findings of the analyst and whether or not it has been used in an illegal activity or criminal act.

Author : Zul Affandy
Article From http://www.vikmall.com