Computer Forensics

Programs that conduct forensic examinations to recover data from computers and other digital devices (e.g., tablets, cell phones) seized as evidence in criminal investigations, examine and analyze the data and present their findings during discovery, depositions, court or administrative hearings or other legal proceedings. Items of interest include email messages transmitted via the Internet as well as data in deleted, encrypted, hidden, password-protected or damaged files. Forensic experts can be called upon to support cases involving data breaches, intrusions or other types of incidents; activities may include verification of alibis, examination of Internet abuse, misuse of computing resources and network usage in making computer-related threats. The ultimate goal is to identify the individual(s) responsible for the criminal activity and prepare forensic evidence for testimony, especially when the examiner will be called as an expert witness.