Thanks to the popularity of the Internet, Windows Solitaire has taken a back seat to unauthorized Internet browsing by employees of pornography web sites. Internet access by employees has also created new problems associated with employees operating side businesses through the unauthorized use of company and government Internet accounts. These types of problems are becoming more frequent as more businesses and government agencies provide employees with Internet accounts. Computer forensics tools and methodologies are used to identify and document computer evidence associated with these types of computer abuses and activities. Computer evidence is unique in other ways as well.
Most individuals think that computer evidence is limited to data stored just in computer files.
Most of the relevant computer evidence is found in unusual locations that are usually unknown to the computer users. Computer evidence can exist in many forms. On Microsoft Windows and Windows NT-based computer systems, large quantities of evidence can be found in the Windows swap file . Computer evidence can also be found in file slack and in unallocated file space . These unique forms of computer data fall into a category of data called ambient computer data .