Computer Forensics is defined in a narrow manner by NIST as the application of computer science and investigative procedures involving the examination of digital evidence, but the discipline of computer forensics also includes acquiring, indexing, analyzing and reporting on results of the investigation. The field includes analyzing digital assets that have been preserved for legal reasons such as laptops, workstations, servers, and related digital peripherals.
How does Computer Forensics relate to eDiscovery?
The proliferation of digital devices across all areas of life has led to more fraud activities involving digital resources such as computers and phones. Today, almost every lawsuit involves some form of digital evidence, much of it gathered and analyzed by specialized digital forensics experts.
In many cases, computer forensics activities are involved in ensuring that data used in legal actions such as litigation are maintained in a manner that can be verified as to its authenticity and integrity. Using specialized software and hardware tools, investigators work to gather digital evidence in a forensically sound manner to avoid unnecessary motion practice, costs, and potential legal sanctions.