§ Guide topic

Digital forensics

One practical guide on digital forensics for UK litigators, in-house counsel and investigators. Read every page online or download the PDF, free and without registration.

Ref · E-D · 2026 · §TPCClass · ConfidentialJuris · England & WalesStatus · Active

Digital forensics, often called computer forensics, is the examination of computers, phones, servers and cloud accounts to establish what happened, when and by whom, to a standard that holds up in court. These guides explain what a forensic examination can and cannot prove, and how to instruct a digital forensics expert properly.

They cover forensic imaging and hash verification, the artefacts that show file copying or deletion, USB and exfiltration evidence, timeline reconstruction, anti forensic behaviour, and how findings are written up as an expert report under CPR Part 35.

§ What these guides cover

  • What digital forensics can and cannot prove
  • Forensic imaging, hashing and verification
  • Recovering deleted files, messages and browsing history
  • USB, cloud and webmail exfiltration evidence
  • Finding and instructing a digital forensics expert

§ 1 guide on digital forensics

Ask The Library about Digital forensics
Instruct the practice

Bring us in early. Defensibility is built, not retrofitted.

Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.

WhatsApp