MYTHS ABOUT DIGITAL FORENSICS- WHAT COMPUTER FORENSIC INVESTIGATORS CANNOT DO Computer Forensic Investigators have been glorified by televisions and movies to such an extent that they are considered invincible by us. The concept of a Digital Forensic Examiner appears to be “cool� to the general public. We expect them to find a solution to every impossible issue and sort out the whole thing at the end of a case. They are usually mystified by a person in this profession and draw parallels between them and CSI (Crime Scene Investigation). Truthfully speaking there are a lot of dissimilarities between fiction and the real role of a forensic specialist but there are similarities too.
However, for our benefit and proper understanding regarding the actual duties and limitations of a forensic investigator, first need to know what exactly they are incapable of doing especially things like miraculous findings from a completely damaged SIM card that can be the ultimate missing piece of the puzzle. Here are certain misconceptions about the extent of ability of a digital investigator that are most common: All Relevant Evidence can be Recovered Discovery and retrieval of digital intelligence in case of damaged laptops, deleted files or complex encryption of data is not always possible. Neither software tools nor critical thinking can guarantee the complete recovery of evidence or data. Also, not each and every data accessed and discovered during a digital forensic examination is relevant or useful to the case. Computer forensic investigators have the complex job of recording and preserving all case materials and recovered data or privileged information to delve further into the case and branch out the investigation.