1.1 This practice describes techniques and procedures for computer forensics within the context of a criminal investigation.

1.1.1 This practice can be applicable to civil litigation.

1.2 This practice describes seizing possible evidence, proper evidence handling, digital imaging, forensic analysis/examination, evidence-handling documentation, and reporting.

1.3 This practice is not all inclusive and does not contain information relative to specific operating systems or forensic tools.

1.4 The values stated in SI units are to be regarded as standard. No other units of measurement are included in this standard.

1.5 This standard does not purport to address all of the safety concerns, if any, associated with its use. It is the responsibility of the user of this standard to establish appropriate safety and health practices and determine the applicability of regulatory limitations prior to use.