Computer technology is the major integral part of everyday human life, and it is growing rapidly, as are computer crimes such as financial fraud, unauthorized intrusion, identity theft and intellectual theft. Computer forensics science plays a very important role in obtaining and analysing digital information for use as evidence in civil, criminal or administrative cases.
Computer forensic investigation generally covers data which could be taken from computer hard disks or any other storage devices. Computer forensics investigators work as a team to investigate the incident and conduct the forensic analysis by using various methodologies and tools (e.g. ProDiscover or Encase plus some customised open source tools). The forensic analyst has the responsibility to capture, analyse and report the digital evidence following ACPO (Association of Chief Police Officers) guidelines.