Computer forensics, also referred to as computer forensic analysis, electronic discovery, electronic evidence discovery, digital discovery, data recovery, data discovery, computer analysis, and computer examination, is the process of methodically examining computer media (hard disks, diskettes, tapes, etc.) for evidence.
Forensic science is concerned with identifying and interpreting physical evidence. Long-standing forms of physical evidence include fingerprints, bloodstains, hairs, fibers, soils, and DNA. However, any object can serve as physical evidence if it provides reliable insight into the activities associated