Computer Forensics involves the recovery and analysis of information
from a computer or other electronic media in a manner that
is defendable in a court of law. Computer Forensics professionals
use special skills and techniques to perform a computer forensic
examination such that the evidence obtained is defendable.
Just like a forensic pathologist performing an
autopsy, computer forensic examinations take into account
the nuances of each investigation to formulate a
method to retrieve the requested information. Then the computer
forensics investigator uses his knowledge, skill and tools
to examine the data in question.