olemus
ISO/IEC 27042, 27043:
kahendkujul talletatav või edastatav teave või andmestik,
mis pole veel analüüsiga otsustatud uurimisrelevantseks;
analüüsiprotsess määrab, milline potentsiaalne digitõend on digitõend
=
information or data, stored, or transmitted in binary form which has not yet been determined, through the process of analysis, to be relevant to the investigation
Note 1. The process of analysis determines which of the potential digital evidence is digital evidence
https://www.iso.org/obp/graphics/std/iso_std_iso-iec_27042_ed-1_v1_en/fig_2.png

ülevaateid
https://medium.com/computer-forensics-lab/digital-evidence-assessment-how-is-done-3f564678016f

https://www.iacpcybercenter.org/investigators/digital-evidence/understanding-digital-evidence/

http://www.forensicsciencesimplified.org/digital/DigitalEvidence.pdf

https://commons.erau.edu/cgi/viewcontent.cgi?article=1289&context=adfsl&httpsredir=1&referer=

vt ka
- arvutikriminalistika
- kohtulik digitõend