Computer forensics is the examination and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law. The subject matter includes:

• Secure collection or reconstruction of electronic data
• Examination of electronic data
• Presentation of computer based information to courts of law

The objective in computer forensics is to recover, analyze, and present computer based material in such a way that it is useable as evidence in a court of law.

The science of computer forensics is concerned primarily with forensic procedures, rules of evidence, and legal processes. It is only secondarily concerned with computers. Therefore, in contrast to all other areas of computing where speed is the main concern, in computer forensics the absolute priority is accuracy.