A computer forensics investigator has the responsibility of recovering data from computers that can be used in the prosecution of a criminal or in gathering evidence of a crime. Many computer forensics investigators are police officers or are employed by the police departments but in smaller areas they may be private computer experts that are used only when needed by the local police force. Computer forensics investigators are required to testify in court if required to explain their role in evidence gathering and to detail the evidence recovery procedure used.
Usually a computer forensics investigator is called in if the information that the police force is looking for has been hidden or erased off of the computer. Despite being erased the investigator can retrieve all or part of the evidence using specialized recovery programs and the actual hard drive of the computer. Forensics investigators can also work to crack or decode encryption programs that prevent information stored on the computer from being accessed. This information may be pictures, text or other sources such as spreadsheets or databases.
A computer forensics investigator must have a good working knowledge of computer construction as well as hard drive processes and data recovery. He or she must have a great deal of patience and should be willing to work for long hours to try to recover information from computers that may have been erased or physically damaged. Understanding networking, encryption and computer crime is also key to this career.
Common work activities include:
Examining and recovering information from computers and other data storage devices to be used in criminal prosecution and evidence gathering.
Taking apart computers and reconstructing damaged systems to attempt to find and locate evidence on the machine.
Preparing reports on information found or located on computers, hard-drives and other memory devices.
Testifying in court regarding evidence collected and the methods used to collect the evidence.
Completing research and keeping posted on internet and computer crimes and methods used to gather evidence.
Training other police and law enforcement officers on how to handle computer related issues and how to collect evidence from computers.
สมัครสมาชิก:
ส่งความคิดเห็น (Atom)
ไม่มีความคิดเห็น:
แสดงความคิดเห็น