1. Function And Define Computer Forensics
1.1 Forensic Definitions
Language The forensic word comes from the Greek Forensis which means debate or debate. While forensic term is one of the fields of science used to help uphold the process of justice through the process of application of science or science.
1.2 Define Computer Forensics
Computer forensics (sometimes known as computer forensic science) is a branch of digital forensic science related to evidence found in computers and digital storage media. The purpose of computer forensics is to examine digital media with the aim of identifying, preserving, restoring, analyzing and presenting facts and opinions about digital information.
Although most commonly associated with investigations of various computer crimes, forensic computers can also be used in civil processes. Disciplines involve similar techniques and principles for data recovery, but with additional guidelines and practices designed to make the audit trail law.
Evidence from computer forensic investigations is usually subject to guidelines and practices of other similar digital evidence. It has been used in a number of major cases and is widely accepted in US and European court systems
Some definitions of computer forensics according to experts:
According to Dr. HB Wolfre, the definition of computer forensics is as follows: "A methodological series of techniques and procedures for gathering evidence, from computing equipment and various storage devices and digital media, that can be presented in a court of law in a coherent and meaningful format. "(Indrajit, 2011)
Simple Definition "Use of a set of procedures to thoroughly test a computer system using software and tools to extract and maintain evidence of criminal acts"
According to Judd Robin, a computer forensics expert: "The simple application of computer investigations and analytical techniques to determine possible legal evidence"
New Technologies extends Robin's definition by: "Computer forensics deals with the maintenance, identification, extraction and documentation of computer evidence stored in the form of magnetic information".
From some of the above definitions, it can be concluded that computer forensics is a science to capture data, process and investigate digital evidence in order to be used in court proceedings.
Another definition is the procedure for obtaining evidence with the purpose of such evidence may be used in court.
1.3 Computer Forensics Functions
In harmony with the definition, in principle there is a major goal of computer forensic activity (Indrajit, 2011) , namely:
To assist in recovering, analyzing, and presenting digital / electronic based material / entities in such a way as to be used as a legitimate buti tool in court; and
To support the identification process of evidence in a relatively quick time, in order to calculate the estimated potential impact of criminal behavior committed by criminals against victims, as well as reveal the reasons and motivation of these actions while looking for parties involved directly or indirectly With unpleasant deeds referred to.
As for computer forensic activity is usually done in two main contexts. First is the context associated with collecting and storing data containing all detailed records of routine activities undertaken by certain organizations or companies that involve information and communication technologies. And second is data collection aimed specifically at the context of a technology-based crime.
From some understanding above, we can draw a common thread that Define Computer Forensics can also be referred to as Digital Forensics is a science that aims to prove a valuable digital evidence in the eyes of the court by using certain methods that can maintain the authenticity of evidence