What is computer forensics?

Simply put, it is the collection, preservation, analysis and presentation of computer related evidence. Utilizing specialized hardware and software tools duplicate copies are made of the original computer data. All recovery, analysis and evidence collection is done from these duplicate images. The original computer data is never altered, but rather preserved for verification of the findings.