The document discusses the basics of computer forensics. It explains that computer forensics is a relatively new field that developed as computers became more advanced and courts realized computer evidence could be easily changed. Investigators now use specific tools and procedures to search computers for evidence without altering any information. A warrant is usually required to search a suspect's computer, and investigators must be specific about what they are searching for and where. Multiple factors can impact the length of a computer forensics investigation.

1. 5/4/2018 Computer Forensics Basics | HowStuffWorks
https://computer.howstuffworks.com/computer-forensic1.htm 1/4
How Computer Forensics Works
BY JONATHAN STRICKLAND
 
Computer Forensics Basics
What's brewing in this lab?
Computer forensics.
©ISTOCKPHOTO/JAMES STEIDL
The field of computer forensics is relatively young. In the early days of computing, courts considered evidence from
computers to be no different from any other kind of evidence. As computers became more advanced and
sophisticated, opinion shifted -- the courts learned that computer evidence was easy to corrupt, destroy or change.
Investigators realized that there was a need to develop specific tools and processes to search computers for
evidence without affecting the information itself. Detectives partnered with computer scientists to discuss the
appropriate procedures and tools they'd need to use to retrieve evidence from a computer. Gradually, they
developed the procedures that now make up the field of computer forensics.
Usually, detectives have to secure a warrant to search a suspect's computer for evidence. The warrant must include
where detectives can search and what sort of evidence they can look for. In other words, a detective can't just serve
a warrant and look wherever he or she likes for anything suspicious. In addition, the warrant's terms can't be too
general. Most judges require detectives to be as specific as possible when requesting a warrant.
Carbon Black Endpoint Security -
From the Experts at CDW
Complete Endpoint Protection from
Modern-Day Cyber Attacks. Watch Our Video …
cdw.com
Learn more
Ad
Tech 
 PREV NEXT 

2. 5/4/2018 Computer Forensics Basics | HowStuffWorks
https://computer.howstuffworks.com/computer-forensic1.htm 2/4
Citation & Date | Reprint
For this reason, it's important for detectives to research the suspect as much as possible before requesting a
warrant. Consider this example: A detective secures a warrant to search a suspect's laptop computer. The detective
arrives at the suspect's home and serves the warrant. While at the suspect's home, the detective sees a desktop PC.
The detective can't legally search the PC because it wasn't included in the original warrant.
Every computer investigation is somewhat unique. Some investigations might only require a week to complete, but
others could take months. Here are some factors that can impact the length of an investigation:
The expertise of the detectives
The number of computers being searched
The amount of storage detectives must sort through (hard drives, CDs, DVDs and thumb drives)
Whether the suspect attempted to hide or delete information
The presence of encrypted files or files that are protected by passwords
What are the steps in collecting evidence from a computer? Keep reading to find out.
IN PLAIN VIEW
The plain view doctrine gives detectives the authority to gather any evidence that is in the
open while conducting a search. If the detective in our example saw evidence of a crime on
the screen of the suspect's desktop PC, then the detective could use that as evidence
against the suspect and search the PC even though it wasn't covered in the original warrant.
If the PC wasn't turned on, then the detective would have no authority to search it and would
have to leave it alone.
 1 … 6 7 
 
MORE TO EXPLORE
by TaboolaSponsored Links
EverQuote Insurance Quotes
Tophatter
Mortgage Quotes | Fetcharate
Phoenix, Arizona: This Unbelievable, Tiny Company Is Disrupting a $200 Billion Industry
It’s Like eBay, But Everything Sells in 90 Seconds.
Arizona: Gov't May Pay Off Your Mortgage If You Have No Missed Payments
Mama Bear Pleads To Man To Save Her Drowning Cubs
2
 PREV NEXT 

3. 5/4/2018 Computer Forensics Basics | HowStuffWorks
https://computer.howstuffworks.com/computer-forensic1.htm 3/4
KiwiReport
Home Chef
Gundry MD
Play this for 1 minute and see why everyone is addicted
Throne: Free Online Game
New Bathroom Trend? Walk In Tubs, and The Prices Might Surprise You
Walk In Tub Search | Sponsored Links
Phoenix: This Meal Service is Cheaper Than Your Local Store
U.S. Cardiologist: I Urge Americans To Quit 3 Foods
RELATED CONTENT
Can you hack a drone?
2016 Broke the Record for Stolen Data
'Security Selfies' May Make Passwords Obsolete
 PREV NEXT 

4. 5/4/2018 Computer Forensics Basics | HowStuffWorks
https://computer.howstuffworks.com/computer-forensic1.htm 4/4
Advertise With Us
About • Podcasts • Privacy • Ad Choices • Terms
Store • Careers • Contact Us • Help • Reprints
Copyright © 2018 HowStuffWorks,
a division of InfoSpace Holdings LLC,
a System1 Company
Newsletter
Get the best of HowStuffWorks by email. Keep up to date on:
Latest Buzz ǀ Stuff Shows & Podcasts ǀ Tours ǀ Weird & Wacky
Sign Up Now!
Enter email >
 PREV NEXT 