Unlocking the Secrets of Computer Evidence: What Would Happen if I Pressed This Key?
Karl J. Flusche · Information Systems Security · 1998
When seizing computer evidence, the investigator or crime scene processor must exercise great care to preserve not only the integrity of the evidence but also the value of the information. Mishandled computer evidence can result in lost data that could have aided the resolution of the crime. In addition, if the computer was seized from a legitimate business, and data files or programs belonging to the company were lost, destroyed, or compromised, the investigative agency could face liability charges.