eBook - Forensics and the World of eDiscovery Forensics and the World of eDiscovery | Page 5

Chapter 2

Getting Through the Data
You affect the world by
what you browse.
– Tim Berners-Lee

In digital forensics, the basic unit is a data
element (such as a registry entry, a link
file, or log file).

In e-discovery, the basic unit is a
document (such as a file or an email).
It is common for a digital forensics
investigator to review millions of data
elements in a single day in order to locate
the evidence for a particular
investigation.