There are many steps in carrying out the entire procedure of Computer Forensic Investigation. The computer forensics analysis tools are readily available for the purpose of performing the forensic analysis. But human intelligence really matters a lot. The capability of the human analysis and intelligent detection of the systems cannot be compromised. The discipline involves similar techniques and principles to data recovery, but with additional guidelines and practices designed to create a legal audit trail.
In court computer forensic evidence is subject to the usual requirements for digital evidence; requiring information to be authentic, reliably obtained and admissible. Different countries have specific guidelines and practices for the recovery of evidence.