What Does Cyberforensics Mean?

Cyberforensics is an electronic discovery technique used to determine and reveal technical criminal evidence. It often involves extracting data from local and/or cloud storage to electronic to establish a chain of evidence for legal process purposes.


In tech lingo, the concept of reverse engineering may also be referred to as computer forensics or digital forensics. In this more general context, the term is used to describe an investigation that disassembles and analyzes code to determine where code broke (debugging) or understand how a cybersecurity exploit was carried out.

Techopedia Explains Cyberforensics

Cybercrimes cover a broad spectrum, from email scams to downloading copyrighted works for distribution, and are fueled by a desire to profit from another person's intellectual property or private information.

Cyberforensic techniques include:

  • Cross-driven analysis that correlates data from multiple hard drives, network resources and cloud services.
  • Live analysis, which obtains data acquisitions before a PC or other digital device is shut down.
  • Deleted file recovery.

Related Terms

Margaret Rouse
Technology Expert

Margaret is an award-winning technical writer and teacher known for her ability to explain complex technical subjects to a non-technical business audience. Over the past twenty years, her IT definitions have been published by Que in an encyclopedia of technology terms and cited in articles by the New York Times, Time Magazine, USA Today, ZDNet, PC Magazine, and Discovery Magazine. She joined Techopedia in 2011. Margaret's idea of a fun day is helping IT and business professionals learn to speak each other’s highly specialized languages.