They can be roughly divided into two groups: Evidence based on static data (obtained from any device that stores digital information) Interception of data during transmission (interception of data transmission and communications)