In this article we will look at what is the process in approaching a computer forensics investigation. The phases in a computer forensics investigation are: Secure the subject system Take a copy of hard drive/disk Identify and recover all files Access/view/copy hidden, protected, and temp files Study special areas on the drive Investigate the […]