Q 1. Define the following terms: a) Forensic science, b) Digital forensics.

a.) Forensics Science:

Forensic science is the use of scientific methods or expertise to investigate crimes

or examine evidence that might be presented in a court of law. Forensic science
comprises a diverse array of disciplines, from fingerprint and DNA analysis to
anthropology and wildlife forensics.

b.) Digital forensics:

Digital forensic science is a branch of forensic science that focuses on the recovery
and investigation of material found in digital devices related to cybercrime. The
term digital Semester
forensics was first used as a synonym
7 Digital Forensicsfor computer forensics. Since
(3170725)
then, it has expanded to cover the investigation of any devices that can store digital
data.
Digital Forensics (3170725) Assignment (Unit 1)

Q 2. Discuss the use digital forensics.

The most common use of digital forensics is to support or refute a hypothesis in a criminal or civil
court:
• Criminal cases: Involve the alleged breaking of laws and law enforcement agencies and
their digital forensic examiners.
• Civil cases: Involve the protection of rights and property of individuals or contractual
disputes between commercial entities where a form of digital forensics called electronic discovery
(eDiscovery) may be involved.
Digital forensics experts are also hired by the private sector as part of cybersecurity and
information security teams to identify the cause of data breaches, data leaks, cyber attacks and
other cyber threats. Digital forensic analysis may also be part of incident response to help recover
or identify any sensitive data or personally identifiable information (PII) that was lost or stolen in
a cybercrime.

Digital forensics is used in both criminal and private investigations.

Traditionally, it is associated with criminal law where evidence is collected to support or negate
a hypothesis before the court. Collected evidence may be used as part of intelligence gathering
or to locate, identify or halt other crimes. As a result, data gathered may be held to a less strict
standard than traditional forensics.
In civil cases, digital forensics may help with electronic discovery (eDiscovery). A common
example is following unauthorized network intrusion. A forensics examiner will attempt to
understand the nature and extent of the attack, as well as try to identify the attacker.
As encryption becomes more widespread, forensic investigation becomes harder, due to the limited
laws compelling individuals to disclose encryption keys.
The major applications of digital forensics are
o Crime Detection- There are various malwares and malicious activities that happen over
digital media and networks, such as phishing, spoofing, ransomware, etc.
o Crime Prevention- There are various cyber crimes that happen due to lack of security or
existing unknown vulnerabilities, such as zero-day vulnerability. Hence, cyber forensics helps in
finding out these vulnerabilities and avoiding such crimes to occur.
o Crime Analysis- This is the main application of digital forensics. It involves- [2]
o Preservation- This process involves protecting the crime scene and the digital evidence or
setup from further manipulation and photographing and video graphing the crime scene, for future

1
Digital Forensics (3170725) Assignment (Unit 1)

reference. Also this process involves stopping any ongoing command that may be linked to the
crime.
o Identification- This process involves identifying the digital media and devices that can
serve as the potential evidence.
o Extraction- This process involves the imaging of the digital evidence, (to maintain the
authenticity of the original evidence), for further analysis.
o Documentation- This involves maintaining the chain of custody and documenting all the
evidence collected from the crime scene.
o Interpretation- This involves making of a report by the digital forensic expert about the
analysis conducted on the digital evidence using various tools such as FTK (for imaging and
mounting of evidences),Sleuth Kit and Autopsy (analyzes disk images and recover files from
them) etc. and presenting it in the court of law. The conclusion is based on the evidence collected
and reconstructing data fragments.

2
Digital Forensics (3170725) Assignment (Unit 1)

Q 3. Choose an Indian organization which is working on digital forensics and

describe working of the organization.
3rd Eye Techno Solutions (India)

ADF Authorized Partner 3rd Eye Techno Solutions - IndiaADF Authorized Partner 3rd Eye
Techno Solutions provides a wide range of digital forensic services to government and law
enforcement including a compact Digital Forensic Field Kit. The portable field forensic kit
comes in a special ruggedized easy to carry case for incident response in the field.

The company is a pioneer in cyber forensics and has a vision to provide the best solutions in the
field of digital investigations. 3rd Eye's experienced and dedicated team of professionals has
roots in government and law enforcement which enables the company to provide high quality
digital investigation solutions, services and training to across the public and private sectors.
Products and services include:

Forensic workstation configuration

Mobile phone forensics

Damaged hard disk forensics

Digital forensic imaging

eDiscovery

Password recovery

Video forensics

Digital Forensic Field Kits

The Digital Forensic Field Kit is compact, a portable field forensic kit comes in a special
ruggedized easy to carry case for incident response in the field.

3
Digital Forensics (3170725) Assignment (Unit 1)

Q 4. Identify the opportunities for digital forensics practitioner in India. (P)

The opportunities for digital forensics practitioners in India are as follows:

1. Computer Forensics Investigator

2. Computer Forensics Technician

3. Information Security Analyst

4. Information Systems Security Analyst

5. Forensic Computer Analyst

6. Security Consultant

Finally, here are a couple of other career possibilities for people with training in computer

forensics, including some links to relevant career pages:

1. Computer forensics examiner

2. Security consultant

3. Certified computer forensics examiner (CCFE)

4. Mobile forensics expert

5. Computer crime investigator

6. Cryptanalyst

4
Digital Forensics (3170725) Assignment (Unit 1)

Q 5. Find out the digital forensics courses offered by reputed international

institutes. (P)

Below are reputed International Institutes that offer Digital forensics:

1. Purdue University (West Lafayette, IN)
Purdue University awards a master’s degree with a specialization in Cyber Forensics.
Digital Forensics (3170725) Assignments
7
2. Utica College (Utica, NY)
The School of Business and Justice Studies at Utica College offers an on-campus Bachelor of
Science in Cyber Security and Information Assurance with two possible concentrations.
3. Champlain College (Burlington, VT)
Champlain College offers a fully online Bachelor of Science in Computer Forensics with handson
opportunities to practice investigation skills through the Leahy Center for Digital
Investigation.
4. City University of New York (New York City, NY)
The John Jay College of Criminal Justice of the City University of New York offers a Master of
Science in Digital Forensics and Cyber security that focuses on the intersections between
forensic science education and the criminal justice system.
5. University of Maryland University College (Adelphi, MD)
The University of Maryland University College offers a Master of Science in Digital Forensics
and Cyber Investigation that can be completed entirely online