Computer forensics — the CSI reality

Computer forensics is not a task to be undertaken lightly by just any IT worker. Instead, it calls for specialised skills and careful, documented procedures. A forensics expert knows what signs to look for and can identify additional information sources for relevant evidence, including earlier versions of data files or differently formatted versions of data used by other applications…

More (Computerworld)