Preservation, identification, extraction and documentation of computer
Evidence. The field is relatively new to the private sector but it has been the mainstay of technology-related investigations and intelligence gathering in law enforcement and military agencies since the mid-1980's. Like any other forensic science, computer
Forensics involves the use sophisticated technology tools and procedures which must be followed to guarantee the accuracy of the preservation of
Evidence and the accuracy of results concerning computer
Evidence processing. Computer
Forensics is often used to recover
Evidence of the users activities from the system hard drive.