This chapter defined digital evidence and explained its evidentiary value and the conditions it must satisfy to be admissible in legal proceedings. The special characteristics of digital evidence were described, showing its great value but also the problems in using it because of its often-complex technical characteristics. The special role of the practitioner to analyze and explain digital evidence to the layperson and the legal fraternity was emphasized.
The reliability of digital evidence in terms of its integrity and use as best evidence was introduced, and in Chapter 4, Recovering and Preserving Digital Evidence, we will look more deeply at the tools and processes for its recovery and preservation. Chapter 4, Recovering and Preserving Digital Evidence, will cover innovative technology that helps practitioners preserve evidence in better and unique ways to avoid contamination as well as making their work a little less arduous.