How can data/evidence spoliation occur?
Spoliation is essentially the destruction of evidence, either intentionally or unintentionally. With electronic evidence, this can occur by simply booting the subject computer. It is also important that during the investigation the examiner follow a strict set of guidelines to ensure that the chain of custody is maintained, and that they themselves dont cause spoliation of the evidence.
