Part 1 - What is Digital Evidence and Why does it Matter

View

2. What is Digital Evidence and Why Does it Matter?

Welcome to the Clarus Project. 

Welcome to the course, which was created by the University of Dundee for the Clarus research project.  Watch the above video to find out more about the Clarus Project and what this course explores. 

Throughout this course, you can use the resources available from the Clarus project to support your learning. You will find these linked throughout the course and in the course resources box on the left-hand side of the page.

What we will cover in this course

Every interaction with a device, platform, or connected system generates data.
In many investigations and legal proceedings, that data can become digital evidence.
In this module, you will explore:

  • What digital evidence is
  • Where it comes from
  • Why it matters
  • How it is processed
  • How it has developed over time

What Is Digital Forensic Evidence?

Digital evidence is information or data, stored or transmitted in digital form, that can be used to establish facts in criminal investigations or legal proceedings. It encompasses all forms of electronically stored information recovered from digital devices, systems, communications, and storage media. 
It includes data from:

  • Digital devices
  • Online platforms and services
  • Networked and connected systems

Digital evidence is not limited to visible files such as documents or photographs. It also includes background data such as logs, timestamps, and metadata that may not be directly visible to users.

Digital evidence is the data itself. Digital forensics refers to the processes used to:

  • Identify relevant digital data
  • Collect and preserve it
  • Examine and analyse it
  • Interpret and present findings

These processes aim to ensure that digital evidence can be relied upon in investigative and judicial contexts.

Reflection Activity

Pause and consider your day so far. Have you:

  • Sent messages?
  • Checked social media?
  • Used online banking?
  • Accessed work systems?
  • Used navigation or transport apps?
  • Streamed music or video?

Each of these actions may have generated digital records.

Digital evidence is embedded in ordinary daily life.

Move to the next page by clicking the arrow on the top right to move to the next page in this section.