What is Forensic Computing ?

Forensic Computing is the collection, preservation, analysis, and presentation of computer-based evidence. Computer Evidence can be invaluable in criminal cases, civil disputes, commercial litigation,insolvency action and human resources/employment proceedings. Far more information is retained on a computer than most people realise. It is also more difficult to complete remove information than is generally thought. For these reasons (and many more), forensic computing can often find evidence of, or even completely recover, lost or deleted information, even if it was intentionally deleted.