What is Computer Forensics?

Author: Jon Isenberg 2-minute read

On December 1, 2006, the Federal Rules of Civil Procedure was amended to formally allow for electronic data discovery in litigation cases.

Computer Forensics is defined as the analysis of computer hard drives (or the analysis of digital media), where the examiner searches for company data, intellectual property, internet history, and can even find hidden files on a hard drive. Additional work may include the investigation of email messages, to verify that they are not tampered with, forged, or deleted. Call logs, documents, are also included. Data recovery from GPS units, phone systems, car computer systems, game consoles, iPods, iPads, Tablets, MP3 players, USB flash drives, SD cards, smartphones. Recovery of data may include missing/deleted ( by now, most people realize that even if you delete a document from your computer, a forensic examiner should be able to recover it) email messages or documents, hidden documents, text messages (even if deleted), and much more.


Computer Forensic


Computer Forensics work is performed by a specialist who has completed extensive technical training, with one or more forensic certifications from these organizations. Although, a certification is not needed to do this work, it makes you more credible which is extremely important when technology is changing so rapidly. Some certifications include:

  • CFCE – Certified Forensic Computer Examiner, from the International Association of Computer Investigative Specialists
  • EnCe – EnCase Certified Examiner, from Guidance Software (now OpenText), a leader in the forensics tools and services arena
  • CCE – Certified Computer Examiner, from the International Society of Forensic Computer Examiners
  • CHFI – Computer Hacking Forensic Investigator, from EC-Council that specializes in the area of anti-hacking

Computer Forensics is now used in an increasingly large number of cases – many of which may not seem obvious on their face. For example, computer forensics was used in a car crash – a very non-technical sounding law suit. In that case, by having a computer forensic examiner investigate the driver’s cell phone, it was possible to determine a rate of speed through geo-positioning as well as distractions to the driver. In fact, most law suits can benefit from computer forensics and the cost of forensics is less than most people think. Today’s savvy lawyers now see Digital Forensics as their weapon of choice in Discovery and are winning cases against those that do not.


Founded in 2003, ELIJAH is a multi-award-winning leader in providing expert digital forensic, data security solutions, and managed IT. ELIJAH is owned and managed by former litigation partners and is an efficient boutique digital forensic, cybersecurity and IT solutions provider that makes clients’ lives easier through effective communication and white glove service. For additional information, please visit https://www.elijaht.com or call 866-354-5240.

Recent Posts


Drop us a line at 866-354-5240, email info@elijaht.com, or send us a message below. We’d love to hear from you!