|
Electronic data recovery, its interrogation and analysis is broadly known as digital or computer forensics. It is the process of identifying potential sources of evidence, recovering and / or preserving this evidence, analysing and then presenting the evidence in a manner that is concise, complete and easily understood in a legal environment. The specialised skills required for this process include understanding the procedures and steps required such that the evidence collected is acceptable in a court of law.
Once the data or files have been recovered, the resulting information must be analysed and assessed with the results being reported in an easy understandable manner. Additionally, this report will detail the steps and processes undertaken to extract and accumulate the relevant information so that it can be demonstrated that the results and the underlying data are accurate and credible. |