Computer forensics

Computer forensics is a branch of forensic science pertaining to legal evidence found in computers and digital storage mediums. Computer forensics is also known as digital forensics.
 
The goal of computer forensics is to explain the current state of a digital artifact. The term digital artifact can include a computer system, a storage medium (such as a hard disk or CD-ROM), an electronic document (e.g. an email message or JPEG image) or even a sequence of packets moving over a computer network. The explanation can be as straightforward as "what information is here?" and as detailed as "what is the sequence of events responsible for the present situation?"
These things must be covered in this include are

Counter forensics

Cryptanalysis

Data recovery

Data remanence

Disk encryption

Resources for this topics:

• link 1
• link 2
• link 3
• link 4
• link 5
• link 6