Electronic evidence often can provide vital information about the criminal activities. Electronic documents thought to be deleted or lost by the user often can be recovered. The background information available with electronic data can provide the footprint necessary to develop the facts of an internal investigation. Software forensic equipment and procedures are paramount to successful investigations of abuses involving computers. Using the right