Computer forensics
Task of recovering data that users have hidden or deleted and using it as evidence
Evidence can be inculpatory (“incriminating”/การกล่าวโทษ) or exculpatory (การพ้นจากความผิด)
Disaster recovery
Uses computer forensics techniques to retrieve information their clients have lost
Investigators often work as a team to make computers and networks secure in an organization