Abstract | Računalna forenzika ključna je disciplina u suvremenim istragama, omogućujući prikupljanje, očuvanje i analizu digitalnih dokaza. Ovaj rad istražuje povijest, metodologije, alate i buduće trendove računalne forenzike, uz analizu stvarnih slučajeva. Razvoj računalne forenzike započeo je kao odgovor na prve slučajeve kompjuterskih prevara i hakiranja, a s ekspanzijom Interneta i razvojem digitalnih tehnologija postala je ključan dio kibernetičke sigurnosti. Osnovni principi forenzičke analize uključuju prikupljanje, očuvanje, analizu i izvještavanje o digitalnim dokazima. Računalna forenzika obuhvaća različite specijalizirane grane, poput forenzike tvrdih diskova, mrežne forenzike, forenzike mobilnih uređaja, cloud forenzike, forenzike zlonamjernog softvera i forenzike Interneta stvari, čime pokriva širok raspon digitalnih okruženja. Forenzička analiza pomoću alata Autopsy, provedena u praktičnom dijelu rada, omogućila je identifikaciju sumnjivih datoteka, analizu metapodataka te oporavak izbrisanih podataka. Time je demonstrirana primjena teorijskih koncepata u stvarnim istragama, čime se potvrdila važnost ovakvih alata u forenzičkoj praksi. |
Abstract (english) | Computer forensics is a key discipline in modern investigations, enabling the collection, preservation, and analysis of digital evidence. This paper explores the history, methodologies, tools, and future trends of computer forensics, along with an analysis of real-world cases. The development of computer forensics began as a response to early cases of computer fraud and hacking, and with the expansion of the Internet and the advancement of digital technologies, it has become a crucial part of cybersecurity. The fundamental principles of forensic analysis include the collection, preservation, analysis, and reporting of digital evidence. Computer forensics encompasses various specialized branches, such as hard disk forensics, network forensics, mobile device forensics, cloud forensics, malware forensics, and Internet of Things (IoT) forensics, covering a wide range of digital environments. The forensic analysis using the Autopsy tool, conducted in the practical part of this paper, enabled the identification of suspicious files, metadata analysis, and the recovery of deleted data. This demonstrated the application of theoretical concepts in real-world investigations, confirming the importance of such tools in forensic practice. |