The advancement of modern technology makes it the ethics governing its use and its capability as evidence in court difficult to determine.
Digital forensics has grown from being a craftmanship to being a part of various kinds of investigations. The discipline deals with the use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation, and presentation of digital evidence obtained from digital sources to reconstruct events and help identify criminals.
This type of discipline did not originate from traditional forensic science but out of practitioner community.
Many computer-related cases have been left unsolved before the development of digital forensics. The lack of preparation, financial resources, tools, and skills needed to successfully gather evidence is the main reason for this. Moreover, the lack of training and correct procedure also causes the evidence to be easily disputed. In digital forensics, the credibility of the digital evidence is the most important aspect. Digital evidence includes computer evidence, digital audio and video, and cell phones. In addition, in legal settings, the evidence should have integrity, authenticity, non-reference, and minimization.
In early times, the computer forensic process is compared to the admission of documents as evidence in courts. The following were the steps identified to admit any documentary evidence into court.
4. Admission as evidence