The University of SydneyPage 19Digital/Computer/Cyber Forensics–The application of scientific knowledge for collecting, analysing, documenting, and presentingdigital evidence related to computer crime to legal problems, i.e. to use it in a court of law–The real-time computer forensics occurs during the use of tools (such as Wireshark) to watch the actual and transmission of “live” data–The reconstructive or post-facto computer forensics occurs when data or processes are recreated or revealed via the tracing or extraction of data –Once the law asserts that a crime has been committed Forensics is used to determine what (and how) it occurred