Library

Electronic evidence is delicate. It is easily altered, damaged or destroyed by improper handling or examination.

It is important to know what you can do to help the Police or Department of Internal Affairs further your complaint.

Any attempt to access data or run a computer program can jeopardise the integrity of the evidence.

Electronic evidence, like all other evidence, must be handled carefully and in a manner that protects its evidential integrity.

If you believe you are a victim of a crime that involves an electronic device (an e-crime), it is vital that you take the following steps:

1. Stop!
2. Do not allow further access to the machine.
3. If the machine is switched off, do not turn it on for any reason. (Microsoft Windows alters data in over 600 places when booting, overwriting potential evidence).
4. Collate any physical evidence relating to the problem (as detailed below).
5. Contact your Local Police Station immediately for advice on how to proceed.

Click on the tab 'information to provide in investigations' to get specific information on what to colect from different ICT. E.g website, email etc

Unauthorised Access

Contact your Local Police Station immediately so that the Electronic Crime Laboratory can be involved from the earliest stages.