Home > Analysis of Physical damage and Computer Forensics

The crime can be even committed by physically damaging the computer system and the resources of any organization. The computer forensics in this case should start first from crime scene investigation. It is similar to a normal criminal case. The task of the computer forensics expert increases here because he has to first establish a strong investigation to access the physical damage and then proceed with computer forensics.

A criminal investigative agency can also be employed for detective work on physical locations. There should be a co-operation of both the parties involved in investigation. In this case the base or crime scene investigation requires being strong so that vital clues are not omitted. Since computer devices or any other hardware device are physically fragile in nature, any damage physically to such devices can cause major damage to the investigative procedures.

It is required for the computer forensics professional to access the details of damaged electronic device and then make the changes. It may also be possible that the criminal has robbed the locations and there is no sign of any electronic device or the computer system itself. The investigative procedures that need be followed here are first to find out the devices and the computer system.

In some cases it is also possible that the criminal has replaced an exact replica of the storage media and escaped with the original. The cases are significant in defense departments where the user is restricted from even accessing the data. More over the information of existence of such data should not be available in some high profile cases.

In some computer related crimes the criminal damages the data by releasing viruses, trojans etc. Here it is required for the administrator to have complete knowledge about the anti virus tools. More over if the criminal intentionally damages the storage media or the computer itself using fire etc. Then the task of computer forensics expert is nearer to impossible. If the disk drives are completely damaged there is low probability of recovery of data or to find out the criminal. It is the task of detective police to find out the person behind it. More over the data may not be recoverable.

The data recovery process plays an important role in physical damage cases because the priority here is to recover the data first. The task of computer forensic professional is to first recover the data and then scan the entire hard disk drive to get any potential evidence.

It is the task of computer forensic professional to analyze and access the damage that is caused by the attack. In any computer forensic case firstly it is required acquire the material related to crime, because it is possible that the criminal may be one of the person of that organization itself.

So it is obvious that the criminal will try to erase his tracks and eliminate the evidence as and when required. Ethical and procedural way to investigate any case will lead to desired results. In some cases it is required not to divulge any progress of the case.

More Information
Intentional Data Loss
Operating System
Basics Computer Forensic
Software Computer Forensic
Computer Forensic Professional
Computer Forensics Impact
Need for Computer Forensics
Computer Forensic Service
Training
Policies
Computer Forensics Advantages
Computer Forensics Disadvantages
Online Support
Business Organization
Analysis Computer Forensics
Steganalysis
Evidence Tracking
Network Forensic Tool
Cryptography
Hackers
Cracker
Internet Security
Firewall
Network Forensic Tool
Acquiring Evidence