To begin with digital evidence, we should know the term that has two parts: digital and evidence.
- Digital: Computers and other electronic devices store and process information in the form of binary digits, or zeros and ones, called digital devices, which includes most of the electronic devices we use today.
- Evidence: This part of the term is rooted in the classic definition of evidence in legal terms: the traces of interactions between persons, items, or objects.Every activity in the real-world leaves traces or prints.
So do the activities performed in the digital world where digital evidence consists of these digital footprints of investigative value—prints that can help a court or jury reach the truth.
It is important to note that every piece of digital information found during the investigations is not digital evidence. Digital evidence is the information that helps establish the fact that the crime has been committed or establishes links between crime, victim, and culprit.