Computer forensics is the art and science of applying computer science to aid the legal process.
Computer forensics investigators perform components of scientific crime scene investigation, as defined by Dr. Henry C. Lee.
Much of scientific crime scene investigation is based on Locard’s exchange principle of transfer theory.
Computer forensics investigators may not be the first responders, but they should understand the steps of first responders in crime scene investigation. Computer forensics can be broken down into four phases: collection, preservation, filtering, and presentation of computer system artifacts that are of potential evidentiary value.
The case Gates Rubber Co. v. Bando Chemical Indus., Ltd. highlighted nonstandard forensics ...