Forensics. Learning Objectives. Definition of Forensics Be able to understand process in building legally sound case Identify forensic capabilities you will need in a typical corporate environment. Definition. Forensic:
Ref: Casey, “Digital Evidence and Computer Crime”,
2nd ed., section 1.6, p20.
Lost when machine is powered off
Lost if you wait too long
Did you ever ask a first grader what happened in school today?