Computer forensics is the scientific process of collecting and examining data stored on electronic devices to find evidence about an event or crime. Evidence found on electronic devices is called digital evidence. Similar to traditional forms of evidence, digital evidence is subject to rules that govern how it can be used later. If digital evidence is not properly collected, it cannot be used in court.

Computer forensic examiners collect digital evidence using special programs and tools. They must collect the evidence carefully to make sure that it is not changed. Examiners often have special skills. They must have a thorough knowledge of computing technologies. They also must understand the scientific method. Finally, examiners must be familiar with the law and evidence rules.