▶ Topics Included: ⇒ Introduction ⇒ History ⇒ Forensics Vs Digital Forensics ⇒ Formal definition ⇒ Need and Importance ⇒ Steps Involved ⇒ Example ⇒ Types & Tools ⇒ Pros & Cons ⇒ Conclusion ⇒ References ⇒ Thanks Note

1. DIGITAL
FORENSICS
BCA (3rd year)
By Riya
Roll no. 4936

2. Introduction
History
ForensicsVsDigitalForensics
Formaldefinition
NeedandImportance
StepsInvolved
Example
Types&Tools
Pros&Cons
Conclusion
References
ThanksNote

3. Digital Forensics (D.F.) is a rapidly growing field that involves the recovery,
analysis, and presentation of digital evidence in legal investigations. As
more and more of our lives are conducted in the digital realm, the need for
skilled digital forensics experts has become increasingly important.
In this presentation, we will explore the basics of digital forensics, including
the tools and techniques used to gather and analyze digital evidence with
an example. We will also discuss some of the important key aspects of DNA
in forensics. At last, we will discuss the pros and cons of digital forensics.

4. HISTORY|
SCIENTISTS INVENTIONS & DISCOVERIES
Alphonse Bertillon
SYSTEM OF ANTHROPOMETRY
It involves measuring various parts of the body to create a unique
identifier for everyone.
Francis Galton
USE OF FINGERPRINTS
Its a way to identify suspects.
Edmond Locard
PRINCIPLE OF EXCHANGE
It states that every contact leaves a trace.
Sir Alec Jeffreys
DNA PROFILING
It is a technique used to identify & distinguish individuals
genetically. It also helps to determine their relationship to others.

5. FORENSICS
• It refers to the use of scientific
methods and techniques to
investigate crimes.
• It can refer to any type of evidence
or investigation.
• Examples: Analyzing DNA samples,
testing blood spatter patterns, or
examining bullet trajectories.
DIGITAL FORENSICS
• It is a specific branch of forensics
that deals with the investigation of
digital devices and data.
• It focuses specifically on electronic
evidence.
• Examples: Analyzing computer hard
drives, examining mobile-phone
records, or reviewing social media
activity to gather evidence.

6. "DIGITAL FORENSICS is the use of scientifically
derived and proven methods toward the
preservation, collection, validation, identification,
analysis, interpretation, documentation and
presentation of digital evidence derived from digital
sources for the purpose of facilitating or furthering
the reconstruction of events found to be criminal or
helping to anticipate unauthorized actions shown to
be disruptive to planned operations."
-Dr. Gary Kessler
A renowned digital forensics expert & professor at
Embry-Riddle Aeronautical University.

7. Need & Importance
01
Investigation
of Cyber
Crimes
Legal Action
Support
Intellectual
Property
Protection
Risk
Management
Forensic
Accounting
Digital forensics
is used to
investigate
cybercrimes such
as hacking and
cyberbullying.
It can be used to
deal with
Copyright and
Patent issue,
trademark issue,
and trade secret
theft.
It can help
organizations to
identify data
breaches, insider
threats, and other
security
incidents.
It is used to
investigate
financial crimes
such as money
laundering, and
fraud.
It can help to
prove or disprove
allegations, as
well as to locate
and recover lost
or deleted data.
02 03 04 05

8. It involves creating a
forensic image of the
device, which is an exact
copy of the digital data
stored on it.
Steps involved in Digital Forensics Process
01
02
03
04
05
The first step is to identify
the digital devices or
storage media that may
contain relevant evidence.
It involve using specialized
software tools to recover
deleted files, search for
keywords or patterns, or
analyze network traffic.
Finally, the results of the analysis
and interpretation are
documented in a forensic report,
which is typically presented to
the investigating agency or court.
Identification Analysis
Preservation
Interpretation
Reporting
Once the evidence is
identified, it must be
interpreted in the context
of the investigation.

9. EXAMPLE
01
02
03
04
05
 A company suspects that one of their employees has been
leaking sensitive information to a competitor.
 The company's IT department identifies the employee's
work computer as a potential source of evidence and hires
a digital forensics expert to analyze it.
 The expert preserves the data by creating a forensic
image, then analyzes the image to identify relevant files &
network activity.
 The expert interprets that the employee had been
emailing confidential information to an email address
associated with the competitor.
 The expert documents the findings in a forensic report,
which is presented to the company's management & legal
team as case’s evidence.

11. Pros & Cons of Digital Forensics
Flexibility
Lost Data Recovery
Business Intelligence
Legal Action Support
Very Expensive
Time-Consuming
Technical Complexity
Potential for Errors

12. CONCLUSION
Digital forensics is a critical tool for identifying and taking legal
action against cybercrimes, recovering lost data, and protecting
intellectual property. While it has many benefits, such as aiding in
legal investigations and providing business intelligence, it's
important to carefully consider the potential drawbacks, such as
high costs and technical complexity. With the continued growth of
technology, digital forensics will remain an important tool in
ensuring the security and integrity of digital systems and data.

13. REFERENCES
Forensics:
https://www.crimemuseum.org/crime-library/forensic-investigation/definition-of-forensics
Digital Forensics:
https://en.wikipedia.org/wiki/Digital_forensics
https://www.open.edu/openlearn/science-maths-technology/digital-forensics/content-section-4.2
Digital Forensics Tools:
https://www.sciencedirect.com/science/article/abs/pii/S2666281720301864