Computer Forensics Law & Legal Definition


Computer forensics refers to the investigation of computer-related media to gather evidence in matters related to the law. It is a branch of digital forensic science. Computer forensics aims to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing, and presenting facts and opinions about the information.

‘An expert in computer forensics should be able to determine what a user did on a computer, which is the fundamental question in a wiping analysis.’ [Nucor Corp. v. Bell, 2008 U.S. Dist. LEXIS 86328 (D.S.C. 2008)].