InternshipKey terms and common mistakes
The words you will hear in Digital Forensics work and the mistakes that most often cost interns approvals.
Key terms
| Term | Meaning |
|---|---|
| Digital forensics | Investigation of digital evidence |
| Identification | Locating evidence sources |
| Chain of custody | Record of evidence handling |
| File system | Method of organising files |
| Forensic image | Bit-by-bit copy of storage |
| Registry | Windows configuration database |
| Logical extraction | Copying accessible data |
| PCAP | Packet capture file |
Common mistakes to avoid
- Working on the original evidence instead of a verified copy.
- Skipping hashes and chain-of-custody records.
- Examining devices or accounts without permission.
- Writing conclusions the evidence does not support.
- Not recording the tools, versions and steps used.
Want to go deeper? The free Digital Forensics learning path has short modules, games and a certificate for each module.