content
Digital evidence can be found on many different storage media: laptop hard drives, external hard drives, servers, desktop hard drives, floppy disks, CD-ROM, DVD and cloud or network storage. The types of evidence recoverable are: emails, pictures, videos, audio files, databases, spreadsheets, documents etc. from a device. It may also be possible to recover previously deleted files.
The main goal of digital forensics is to extract data from the electronic sources, process the data into actionable intelligence and present the findings for prosecution or review. All processes utilise sound forensic techniques to ensure the findings meet the scope of the engagement.
