In addition to traditional digital forensics, cyber and hacking forensics play increasing important roles in digital information analysis.
Digital Forensics involves proper documentation, acquisition, preservation, analysis and reporting of electronic/digital evidence. Potential evidence sources include traditional items like computers, cell phones, camera/surveillance systems, door access control systems, network storage devices, servers and tablets as well as network storage devices, portable hard drives, USB attached media, the “Internet Of Things” (IOT) devices and the metadata related to these devices and files. It essentially encompasses any device that can store electronic information.
Cyber forensics adds examination and analysis of “online” services like Cloud, internet, email, cell tower, geolocation, IP addresses and social media.
While hacking forensics incorporates things like unauthorized access/intrusion and IP obfuscation.
The scope of these forensic disciplines expand continuously as technology advances.