Computer forensic tools and techniques

The intricacies of computer forensics require the use of multiple tools that will effectively address the following investigative needs: drive image acquisition, evidence preservation, string search, file recovery and analysis, network activity capture and analysis, and hidden data extraction. This paper will briefly explore the following requirements inherent to computer forensics investigation: preserving digital evidence, performing strings and keyword searches, recovering deleted data, and locating and extracting hiddenfiles.