What is IT forensics (digital forensics or computer forensics)?
IT forensics, also known as digital forensics or computer forensics, is about using investigation and analysis techniques to capture and secure evidence from a specific digital data carrier in such a way that it can be used in a legal proceeding in court. The goal of IT forensics is to conduct a structured investigation and ensure that the chain of evidence is fully documented and secured. Using this systematic and standardized procedure, it is possible to determine exactly which processes have taken place on an IT system under investigation and who was responsible for these actions.