What can a computer forensics specialist do?
The most important factor in any computer forensics investigation is ensuring that the evidence does not become altered during the course of the investigation. Computer forensics specialists are trained to retrieve or analyze data while retaining the integrity of the machine that is being investigated. Often, a computer forensics specialist can prepare a mirror copy of the data being retrieved or analyzed for presentation in court or on-site evaluation of data.