Moonlightballroom

Making appropriate observations and documenting them is the first step in any forensic investigation. Similarly, in computer forensics, the condition of the computer and its state are of primary importance and need to be observed and noted. A good computer forensic consultant also needs to understand Crime Scene Forensics properly before getting to a crime scene. No destruction of evidence is allowed although it may be done unwittingly. In case of a computer crime scene, it is necessary that the forensic consultant does not touch the keyboard or the mouse before they are dusted for fingerprints.