Definition[]
Computer forensic tools "identify, preserve, extract, and document computer-based evidence."[1] The generally consist of software designed for:
- Deleted file recovery
- Disk imaging
- Forensic media preparation
- Mobile devices
- String search
- Write-blocker