Digital Forensics is defined as the process of preservation, identification, extraction, and documentation of computer evidence which can be used by the court of law. It is a science of finding evidence from digital media like a computer, mobile phone, server, or network. Cyber incidents are fast-moving and increasing in number and severity. When a cyber incident occurs, the attacked enterprise responds with a set of predetermined actions. Applying digital forensics to aid in the recovery and investigation of material on digital media and networks is one of these.
Businesses have always looked at new information and digital technology in terms of what it can do for them, for example: greater profitability, and expanded customer reach through online shopping. Now, customers also have a range of new choices, many of which are beyond the purview of business. Decisions about what to focus on or buy are increasingly informed through social networks, where personal and business contacts, product selections, home video clips, favorite news items, even real-time location coordinates, are shared instantly and widely.