In other words, a detective can't just serve a warrant and look wherever he or she likes for anything suspicious. The warrant must include where detectives can search and what sort of evidence they can look for. Usually, detectives have to secure a warrant to search a suspect's computer for evidence. What are the basics of computer forensics? What can investigators look for, and where do they look? Find out in the next section. Detectives must discover new ways to search for evidence without dedicating too many resources to the process. Today, with hard drives capable of holding gigabytes and even terabytes of data, that's a daunting task. In the early days of computers, it was possible for a single detective to sort through files because storage capacity was so low. ВComputers are getting more powerful, so the field of computer forensics must constantly evolve. If it's easy to change computer data, how can it be used as reliable evidence? Many countries allow computer evidence in trials, but that could change if digital evidence proves untrustworthy in future cases. Some people say that using digital information as evidence is a bad idea. Lawyers can contest the validity of the evidence when the case goes to court. If detectives seize a computer and then start opening files, there's no way to tell for sure that they didn't change anything. For example, just opening a computer file changes the file - the computer records the time and date it was accessed on the file itself.

Prodiscover basic reddit