ABSTRACT
At some point in every cybercrime investigation the investigator will need to obtain evidence of the crime. Unless the evidence is dropped on the investigator’s lap, the investigator will need to obtain the evidence by searching a workplace, home, or other physical location (for example, cyber café or public library) for digital evidence and seize a computer or other device, removing it to a forensic lab and analyzing the device in a search for the evidence. us, investigators, whether members of law enforcement or private sector employees, should not undertake that investigation without a basic understanding of the law that applies to searches and seizures and the potential liability that might result from a violation of statutory or case law in this area.
