Forensics Is So "Yesterday"
Michael A. Caloyannides · IEEE Security & Privacy · 2009
Computer forensics' presumed usefulness against anyone with computer savvy is minimal because such persons can readily defeat forensics techniques. Because computer forensics can't show who put the data where forensics found it, it can be evidence of nothing.