In system, there are anomalies to obscure this arrangement because the grouping by the provider is given by team skill sets, contractual obligations, lab scope, so on and so forth. For example:
- Tablets or smartphones without SIM be considered computers.
- SD cards (and other removable storage media) are regularly found in smartphones and tablets so that they could become purview under mobile forensics or computer forensics.
- Tablets with keyboards may be representing as computers and suit under computer or mobile forensics.
The science of digital forensics has a professedly infinite future. As technology advances, the domain will continue to unfold as innovative models of digital data are created by new devices logging people’s activity.
types of digital forensics
Digital forensics is a continually evolving scientific field with many sub-disciplines. Some of these sub-disciplines are:
- System Forensics – The identification, preservation, collection, analysis and reporting on the digital evidence. Found on computers, desktops and laptops and storage media in aid of investigations and legal proceedings. Windows and Mac Forensics
- Network Forensics – The monitoring, obtaining, saving and review of network packets or events to identify the root cause of cyber attacks, intrusions or other problem incidents, i.e. computer worms, virus or malware infestations, unusual network traffic and security breaches.
- Mobile Forensics – The recovery of electronic evidence from smartphones. SIM cards, eSIMs, GPS devices, tablets and game consoles. iOS and Android Forensics.
- Digital Image Forensics – The extraction and dissection of digitally acquired photographic images to substantiate their authenticity by redeeming the metadata of the image from ascertaining its story.
- Digital Video/Audio Forensics – The acquisition, examination and evaluation of sound and video recordings. It is the substantiation of authenticity as to whether a record is original. And, verify it has not been altered with, either maliciously or accidentally.
- Memory Forensics – The evidence retrieved from the memory of a working computer is live acquisition.