cyberforensics
Online crime analysis
Cyberforensics is the investigation of digital evidence to reconstruct events or establish facts, typically for legal proceedings.
Specialists recover deleted files, trace network intrusions, and analyze devices to determine who did what and when: The cyberforensics team found evidence of data theft on the company's servers.
Also called digital forensics or computer forensics.
Descriptive information about content
- timestampsRecorded times of events
- logsCut wood sections
- artifactsHuman-made historical objects
- hashesOctothorpes or breakfast medleys
registry · sectors · clusters · steganography · preservation · acquisition · integrity
Harmful computer programs
- ransomwareHostage-taking code
- phishingFraudulent credential harvesting
- botnetRemotely controlled infected computers
- spywareHidden surveillance program
rootkit · keylogger · backdoor · zero-day · exploit · worm · virus · DDoS
Extracting patterns from datasets
- correlationStatistical relationship measure
- heuristicsPractical problem-solving shortcuts
- clusteringForming concentrated groups
- classificationSystematic grouping by traits
Assigning origin or cause
- reconstructionRebuilding after destruction
- examinationMethodical assessment or review
- detectionAct of finding something
- tracingCopying by following lines
tracking · fact-finding · prosecution · reporting · documentation · testimony · subpoena · warrant
Converting ciphertext to plaintext
metadata
Descriptive information about content
- timestampsRecorded times of events
- logsCut wood sections
- artifactsHuman-made historical objects
hashes · registry · sectors · clusters · steganography · preservation · acquisition · integrity
malware
Harmful computer programs
- ransomwareHostage-taking code
- phishingFraudulent credential harvesting
- botnetRemotely controlled infected computers
spyware · rootkit · keylogger · backdoor · zero-day · exploit · worm · virus · DDoS · exfiltration
data-mining
Extracting patterns from datasets
- correlationStatistical relationship measure
- heuristicsPractical problem-solving shortcuts
- clusteringForming concentrated groups
attribution
Assigning origin or cause
- reconstructionRebuilding after destruction
- examinationMethodical assessment or review
- detectionAct of finding something
tracing · tracking · fact-finding · prosecution · reporting · documentation · testimony · subpoena · warrant · disclosure
decryption
Converting ciphertext to plaintext
cyberforensicscrime scene investigation
Examining where offenses occurred
forensic pathology · ballistics · fingerprint analysis · forensic anthropology · autopsy
cyber, forensics, forensic, cybernetics, cybernetic, cyberspace, cybersecurity, cyberattack, cybercrime