The Digital Evidence section is tasked with examining computer evidence and any digital media for information or data pertinent to the investigation of a crime. This may include the recovery of deleted or damaged files as well as restoring entire partitions on a hard drive.
Computer evidence may include:
- Desktop computers
- Laptop computers
- Cellular phones
- MP3 devices
- Digital cameras and camcorders
- Personal digital assistant devices (PDAs)
- Any storage device that may hold digital media
Examples of cases that may incorporate this type of evidence are:
- Child pornography/exploitation
- Terrorist threatening
- Homicide
- Rape
- Suicide
- Clandestine methamphetamine labs
- Hacking
- Fraud
- Identity theft
- Other related white collar crimes
After processing the evidence, the digital evidence analyst will prepare a detailed report of the analysis and any pertinent data recovered. Then, upon request, will testify in criminal proceedings as an expert witness in the area of digital evidence recovery.
In addition to processing cases, the digital evidence section is available for technical advice and assistance in the seizing and preserving of evidence at the crime scene. It is strongly advised for enforcement officers to consult a forensic expert before attempting to access in any way a computer or device at the crime scene.
