The present application relates to a method and apparatus for digital forensic corresponding to an IoT (Internet of Things) terminal, the method including: performing, by an electronic device, an analysis of an Internet of Things (IoT) terminal to which digital forensics is to be performed; selecting an injection method of injecting, by the electronic device, a certificate into the IoT terminal; injecting, by the electronic device, a certificate into at least one of the IoT terminal, the electronic device, and a portable device communicating with the IoT terminal using the selected injection method; and verifying, by the electronic device, data stored in a cloud server communicating with the IoT terminal based on the injected certificate, and can also be applied to other embodiment.