Cyber forensics is the acquisition, examination, and reporting of information found on computers and networks that pertain to a criminal or civil investigation, although the same processes and methods are applied to corporate and other "private" investigations. Nearly everything that someone does on a computer or a network leaves traces — from deleted files and registry entries to the Internet history cache and automatic Word backup files. E-mail headers and instant messaging logs give clues as to the intermediate servers through which information has traversed. Server logs provide information about every computer system accessing a Web site.
Cyber forensics is increasing in importance for the law enforcement community for a number of reasons, not the least of which is that computers and the Internet represent the fastest growing technology tools used by criminals... and this trend will continue for the foreseeable future.