ABSTRACT
A central theme throughout this chapter is the fact that technology has been the driving force behind the field of computer forensics. The need for computer forensics developed with the onset of the Information Age or Digital Age; this digital revolution was marked by the increased production, transmission, and consumption of, and reliance on, information. Although the terminology is different, there are four common stages in the digital forensic investigation: survey/identification, collection/acquisition, examination/analysis, and report/presentation. The chapter appreciates how almost every criminal investigation now involves some form of digital evidence. Overall, virtually every crime may involve some form of digital evidence, and it is up to law enforcement to be able to identify the possible sources thereof. Finally, the chapter explores the importance of evidence integrity and forensic soundness since digital evidence is only admissible if its authenticity can be verified in a court of law.
