eBook - Forensics and the World of eDiscovery Vol.1 May, 2014 | Page 11

In e-discovery, such data may not be
considered because they are not the
focus of the case and data fragments
are difficult to analyze for those without
computer science expertise.

You Still Need Forensics

In forensics, carved, deleted, and
orphaned data is always considered
because deleted items can have a place
in the story about what happened on a
computer – in some cases, they are the
story.