Electronic Crime Scene Investigation: A Guide for First Responders, Second Edition

Published April 14, 2008

Introduction

Section 2 — What Is Digital Evidence?

Digital evidence is information and data of value to an investigation that is stored on, received, or transmitted by an electronic device. This evidence is acquired when data or electronic devices are seized and secured for examination.

Digital evidence—

• Is latent, like fingerprints or DNA evidence.
• Crosses jurisdictional borders quickly and easily.
• Is easily altered, damaged, or destroyed.
• Can be time sensitive.

NOTE: First responders should remember that digital evidence may also contain physical evidence such as DNA, fingerprints, or serology. Physical evidence should be preserved for appropriate examination.