Even if you do not currently have physical custody of the computer, an expert can help the solicitor explain to the Court how and why obtaining a forensic image of the computer may be crucial to the case. That is, the computer may contain hidden or deleted files that could bolster the case, and an expert can help assess that possibility.

It is important to maintain an audit trail of exactly what actions were taken and by whom. When did you receive custody of the evidence, what handover documents were created, where was the evidence stored and who has had access to it pending investigation? If you have accessed the data, how was this done and who witnessed it. Accessing data can often write further information to the media, so it is crucial to use a write blocker.

Before accessing any data or files, give us a call on (800) 659-3012. One of our consultants can talk you through how to view the data without compromising any future claim. They will gladly discuss your concerns and give you a realistic opinion of whether a forensic investigation is worthwhile.

Reference: http://www.datarecoveryspecialists.co.uk/blog/a-guide-to-handling-electronic-data-and-digital-files