With most organizations using the IT infrastructure for several reasons, it has become critical to manage the IT assets from sabotage, inherent vulberabilities in the systems, and prevent the intruders from unauthorized access to business critical data. Since, data recovery and service restoration is very long drawn process and procedure oriented, it is always advisable for organization to have certain tools and professionals to oversee these functions rather than realizing the same post business disruption. Semi Automated tools with manual intervention and auto monitoring tools can help the forensic specialists to extract the details of accused in any possible contexts. Organizations should impart the necessary knowledge to its employees to overcome the organizational level disasters through a systematic employee awareness programs in adopting the cyber forensics and evidence extraction mechanisms.