what is cyber forensics

Cyber forensics, also known as computer forensics or digital forensics, is the practice of extracting and analyzing information from electronic devices to gain intelligence into activities that involve the use of technology. It is an end-to-end investigative process that includes data acquisition, analysis, documentation, knowledge extraction, reporting, and presentation in an acceptable format, all according to the court of law or predefined audit procedures. Cyber forensics is required for legal compliance and to enforce auditing policies in a way that the audit reports follow a fixed written format and are distributed to the concerned decision-makers and stakeholders. Cyber forensics experts extract data from a variety of sources, including mobile devices, cloud computing services, and databases. Cyber forensics is used by law enforcement agencies in a court of law or by businesses and individuals to recover lost data from drives that servers that have crashed or operating systems that have been reformatted. Cyber forensics professionals work under a variety of job titles, but nearly all of them work to identify, collect, and store evidence from an electronic device.