ABSTRACT
The investigative responsibilities of a law enforcement agency do not end with execution of the search warrant and collection of the computer. Evidence from cybercrimes rarely comes from examining the physical compartments of the computer. The evidence needed to prosecute these cases successfully will normally require examining the various storage media inside the computer. Therefore, once the computer is properly secured from the crime scene, preparation begins for the forensic examination of the computer. This examination requires skills in computer forensics.
