Computer forensics is a set of processes used to acquire and analyze digital evidence. This is useful in determining how malware entered a system and also for proving or disproving that information of a certain form exists or does not exist on a system.
James Antonakos of the National Cybersecurity Institute explains.
Having trouble with media player? Click here to listen.