|Project Description: || The technological advancements in communications and information exchange have paved the way for an entirely new form of crime called cyber crime. Cyber crime has forced the law enforcement officials to develop new areas of expertise for identifying, preserving, analyzing and presenting evidence to prove thecrime inthe court of law. Evidence derived from computers has been used in court for almost 30 years. The overall goal of the computer forensics is to provide digital evidence of a specific or general activity.
The act of recovering the data from numerous storage devices like floppy disks, hard drives and removable disks form the base for computer forensics. Though several tools have been developed to undertake the investigation, usage of the proper tool to achieve a particular goal is important as all tools do not work well in all situtations. Criminals have taken a step ahead and started using the loopholes of forensic tools so as to stay undetected. The main idea of this project is to study techniques, methods and strategies used by forensic investigators to identify, preserve, analyze and present the criminal evidence in the court of law. During the couse of the project, different categories of memory devices that could be used to store crimial data are studied and the appropriate tools that are used to study those memory devices are tested and results are tabulated.
Finally, a recommendation has been made to use proper techniques to identify the crimial activities and evidence.