A few computer forensic images.

What is Digital Forensics / Computer Forensics?

Digital forensics is the application of scientific methodology to computer media to establish factual information or provide expert opinion for legal proceedings. The terms 'computer forensics' and 'digital forensics' can be used interchangeably. There are five main phases to computer forensics:


  • The imaging or acquisition of the computer media (collecting the data)


  • Examining the data (generally using specialist forensic software)


  • Analysis of the data


  • Compiling a report, statement or letter of findings


  • Providing expert witness testimony.


Electronic Evidence

The following are examples of media which we can examine that may contain electronic evidence: hard disk drives (also known as computer disks, hard disks or hard drives); USB external hard disk drives; mobile phones; PDAs; MP3 players; thumb drives (also known as flash drives, USB stick or sticks); floppy disks; ZIP disks; tapes; micro drives; optical media such as compact disks (CDs) and Digital Versatile Disks (DVD) and camera cards.

ACPO Good Practice Guide for Digital Evidence

Our computer forensics experts adhere to the Association of Chief Police Officers (ACPO) Good Practice Guide for Digital Evidence. The main principles of the ACPO Good Practice Guide for Digital Evidence are:


  • Principle 1: No action taken by law enforcement agencies or their agents should change data held on a computer or storage media which may subsequently be relied upon in court.


  • Principle 2: In circumstances where a person finds it necessary to access original data held on a computer or on storage media, that person must be competent to do so and be able to give evidence explaining the relevance and the implications of their actions.


  • Principle 3: An audit trail or other record of all processes applied to computer-based electronic evidence should be created and preserved. An independent third party should be able to examine those processes and achieve the same result.


  • Principle 4: The person in charge of the investigation has overall responsibility for ensuring that the law and these principles are adhered to.


Further Information

If you require further information about our digital investigation services please call 01280 707190 or eMail info@griffinforensics.com.