Computer forensics reveals the activity conducted on a computer or other electronic device, whether or not the evidence has been deleted or hidden. This consists of deleted file recovery and internet/web activity and also hidden file recovery from multiple formats, such as text files, graphics, email and more. Data can also be recovered from various storage media such as Compact Flash, Smart Media, PDA’s, digital cameras, cell phones and more.

Savvy computer users usually know several tricks to hide their activity from the casual inquirer. This includes deleting Internet history, email history, temporary Internet files and more. Despite all of this, there is usually extensive evidence that remains. A trained investigator with the right technology can usually uncover it.

Files and documents can also be hidden in various ways. They can be embedded in other files or hidden in unallocated disc space. Files, such as graphic image files, can be altered so that they do not show in normal file directory listings. Forensic analysis can often uncover this.