Editing Computer forensics (section)

=== Mobile device forensics ===
; Phone logs
: Phone companies typically retain logs of received calls, which can help create timelines and establish suspects' locations at the time of a crime.<ref name=":02"/>

; Contacts
: Contact lists are useful in narrowing down suspects based on their connections to the victim.<ref name=":02"/>

; Text messages
: Text messages contain timestamps and remain in company servers, often indefinitely, even if deleted from the device. These records are valuable evidence for reconstructing communication between individuals.<ref name=":02"/>

; Photos
: Photos can provide critical evidence, supporting or disproving alibis by showing the location and time they were taken.<ref name=":02"/>

; Audio recordings
: Some victims may have recorded pivotal moments, capturing details like the attacker's voice, which could provide crucial evidence.<ref name=":02"/>