A computer forensic investigator has special training and uses a wide variety of tools depending on the type of computer, phone, or account that they are examining. The forensic analysis varies and may involve basic information retrieval (including deleted data recovery) or a deeper analysis to reconstruct events.
