Some important considerations when conducting a computer forensics exam include:

The computer forensics expert must use specialized computer forensics software and generally accepted procedures.
The computer forensics expert has to carefully handle the evidence so that it isn’t compromised, and a proper chain of custody  must be maintained to prevent tampering.
Mishandling the evidence, even once can be fatal as compromised evidence can’t be restored to its original state when mishandled.
Remember that computer forensics is not magic.  If the evidence is not there, it can’t be recovered, but if it is there, it probably is recoverable.
This computer forensics information is presented by AVM Technology, LLC, a Computer Forensics, E-Discovery, and Computer Security consulting company located in Richmond, VA and serving clients throughout the United States.