Files are sometime stored with a deceptive extension, sometimes images will be stored to look like a text document. Remote file storage may be utilized to hide data, so be aware of remote file servers, or data that may be stored on removable media and kept off-site. Remember when it comes to computer storage avenues, locally is not always used. For these reasons many cases are not even prosecuted. Of the 419 cases referred to prosecutors, only 83 were prosecuted.
Evidence is essential to successfully apprehending and convicting the criminal of their offense.
Thus, protecting the evidence and being thorough is very crucial to the investigation. Since some cases may not go to trial for several years, this task can be somewhat tedious and space consuming. But if it is done correctly, the benefits will pay off in the long run. Some common steps found among computer forensic professionals. Below are some steps that many of the computer forensic professionals have in common and consider to be steps in the right direction.