Definition
Digital Forensics is the field concerned with preserving, acquiring, analysing and interpreting digital data to reconstruct events and obtain reliable evidence.
Human Explanation
It helps determine what happened, when it occurred, which systems were involved and what actions were performed.
Why it Matters
Rigorous analysis helps establish the causes and impact of an Incident and collect evidential material.
Conceptual Boundary
Digital Forensics is not limited to recovering deleted data. It covers the complete process of preserving and analysing digital material.
Practical Perspective
Digital evidence is most valuable when preserved in a way that guarantees its integrity and enables later verification.