The procedures and techniques used to identify, collect, acquire, preserve, analyse, and ultimately present digital evidence in court must be in accordance with existing criminal procedural law (discussed in Module 3 on Legal Frameworks and Human Rights). This form of law prescribes the rules of evidence and criminal procedure that must be followed to ensure that evidence is admissible in court. Information and communication technology (ICT) can provide evidence of a crime. Data obtained from ICT that can be used in a court of law is known as electronic evidence(a.k.a., digital evidence), and the process of identifying, acquiring, preserving, analysing, and presenting this evidence is known as digital forensics. This Module provides an in-depth examination of both digital evidence and digital forensics.
The sub-pages to this section provide a descriptive overview of the key issues that lecturers might want to cover with their students when teaching on this topic: