Computer forensics refers to the application of computer investigation and analysis techniques in the interests of determining potential legal evidence. Forensic data capture may be deemed necessary during discovery if potentially relevant files have been deleted, written over or damaged or if there is reason to believe there is hidden or encrypted data on a system.

During the forensics process, an expert protects the targeted computer system or systems from any alteration, damage, data corruption or viruses. He images the computer’s hard drive, in effect taking a bit-for-bit digital snapshot of it at a specific point in time and preserving all information exactly as it existed at that moment. This image has a digital fingerprint that will serve to authenticate the image in court, if necessary, and can be searched for relevant data.

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]