Data you discover from a forensic examination falls under your state’s rules of evidence
Or the Federal Rules of Evidence
Digital evidence is unlike other physical evidence because it can be changed more easily
The only way to detect these changes is to compare the original data with a duplicate
Most federal courts have interpreted computer records as hearsay evidence
Hearsay is secondhand or indirect evidence