What is Computer Forensics?
A computer forensics examination is the process of: preserving, locating, recovering and analyzing information from a computer or other digital devices so it can be presented in a criminal process, a civil matter or provide a basis for internal action in a manner that can withstand close scrutiny.
Preserve.
Locate.
Recover.
Analyze.
Document.