Editing Computer forensics (section)

{{short description|Branch of digital forensic science}}
[[File:Computer Investigations and Analysis Division (39033998171).jpg|thumb|A forensic expert examining a mobile device that was seized during an investigation]]
[[File:PersonalStorageDevices.agr.jpg|thumb|Media types used for computer forensic analysis: a [[Fujifilm FinePix]] [[digital camera]], two [[flash memory]] cards, a [[USB flash drive]], a 5GB [[iPod]], a [[CD-R]] or [[DVD recordable]], and a [[Mini CD]].]]
{{ForensicScience|digital}}

'''Computer forensics''' (also known as '''computer forensic science''')<ref name="noblett"/> is a branch of [[digital forensics|digital forensic science]] pertaining to evidence found in computers and digital [[storage media]]. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing, and presenting facts and opinions about the digital information.

Although it is most often associated with the investigation of a wide variety of [[computer crime]], computer forensics may also be used in civil proceedings. The discipline involves similar techniques and principles to [[data recovery]], but with additional guidelines and practices designed to create a legal [[audit trail]].

Evidence from computer forensics investigations is usually subjected to the same guidelines and practices as other digital evidence. It has been used in a number of high-profile cases and is accepted as reliable within U.S. and European court systems.