Digital Evidence


THE ADVANCEMENT OF MODERN TECHNOLOGY MAKES IT THE ETHICS GOVERNING ITS USE AND ITS CAPABILITY AS EVIDENCE IN COURT DIFFICULT TO DETERMINE.





Digital Evidence

post img

The advancement of modern technology makes it the ethics governing its use and its capability as evidence in court difficult to determine. Digital forensics has grown from being a craftmanship to being a part of various kinds of investigations. The discipline deals with the use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation, and presentation of digital evidence obtained from digital sources to reconstruct events and help identify criminals. This type of discipline did not originate from traditional forensic science but out of practitioner community.

Many computer-related cases have been left unsolved before the development of digital forensics. The lack of preparation, financial resources, tools, and skills needed to successfully gather evidence is the main reason for this. Moreover, the lack of training and correct procedure also causes the evidence to be easily disputed. In digital forensics, the credibility of the digital evidence is the most important aspect. Digital evidence includes computer evidence, digital audio and video, and cell phones. In addition, in legal settings, the evidence should have integrity, authenticity, non-reference, and minimization.

In early times, the computer forensic process is compared to the admission of documents as evidence in courts. The following were the steps identified to admit any documentary evidence into court.

    1. Acquisition
    2. Identification
    3. Evaluation
    4. Admission as evidence

Relating to this, various models were proposed to standardize the digital forensic process in electronic crime scene investigation. These consist of different steps which mainly focus on:

    1. Preparation of tools, techniques and documents, and monitoring authorization and management support
    2. Collection of untainted evidence
    3. Preservation of evidence which includes replication of the digital evidence
    4. Examination of evidence, including revealing hidden and obscured information, and the relevant documentation
    5. Reconstruction of data fragments and drawing conclusions based on evidence found
    6. Presentation of report outline, including the examination process and data recovered from the investigation


For more information regarding our digital evidence services, please 




It is a capital mistake to theorize before you have all the evidence. It Biases the Judgement

Sherlock Holmes