What is Computer Forensics?

Computer Forensics is the identification, collection, preservation, acquisition, investigation, analysis and reporting of digital devices and data present on them so that any information identified is admissible in court proceedings.
The findings of any digital forensic examination should be provided in an understandable and clear format and be supported by a technical or expert witness who is able to explain their findings to a variety of people who may be involved in a trial or the final court hearing.

The Use of Computer Forensics:

• Anyone can use a computer forensics investigation service to identify and retrieve data from their device.
• Law enforcement use computer forensics within any cases where a digital device may be involved. This is conducted to secure and obtain evidence to form the basis of a case or to support other more fundamental evidence within a Prosecution case.
• Digital Forensics can also be used by a Defendant in a case to prove their innocence, for example, text messages sent or received on a mobile phone or Internet activity on a computer may show activity and/or intent that differs from the allegations being made by the Prosecution in a case.
• A company may use digital forensics techniques to assess the activities of an employee to determine whether a breach in contract has occurred, for example, to identify browsing inappropriate websites or copying or distributing confidential client information including the examination of deleted emails from a server or workstation.
• A private individual may require digital forensics services to identify whether a partner has been communicating with another party.