Forensics

Cyber forensics is the process of extracting information from a computer storage medias and recovering evidences.  It involves the preservation, identification, extraction and documentation of computer evidence stored in the form of magnetically encoded data.  The evidence recovered from a computer must be done so in a way so that the evidence value is not damaged in the process.  Illegal activities on a computer are much like a crime scene as the computer leaves traces and there is evidence to be discovered from the "scene".