Mon Textbook Chapter 1 summary

Chapter 1 Introduction to forensics

The computer forensics is extracting data from storage device in scientific manner.The forensics is done in three process: collecting, analysing, and presenting. Chain of custody is important principle in forensics. It contain detailed log of evidence. Also, having knowledge in hardware, software, and network is important in computer forensics.