Kay is a Computerworld contributing writer in Worcester, Mass. You can contact him at russkay@charter.net.

SIDEBAR

Electronic discovery

Computer forensics is one aspect of a broader concept called electronic discovery, which refers to any process in which data from a particular computer or network is sought, located, secured and searched with the intent of using it as evidence in a civil or criminal legal case. Hacking that may be ordered by a court or sanctioned by a government agency to obtain evidence can also be considered a form of electronic discovery.

In general, discovery refers to the overall process, whereas computer forensics is concerned with specific procedures and technical interpretation of discovered data.