The process of examining and recovering digital data from sources for legal evidence and crime investigation.