What is forensic computing?

The application of computer technology to the investigation of computer based crime has given rise to the field of forensic computing. This is the process of identifying, preserving, analysing and presenting digital evidence in a manner that is legally acceptable. This paper provides an overview of the field of forensic computing. (Abridged version of report prepared during the Donald Mackay Churchill Fellowship).