What To Expect
You can expect a computer forensic specialist to provide countless amounts of help, but here are some of the specifics that they will provide to the unit.

• First, they will bring the unit in safely, insuring that nothing is lost on the way to the lab or facility.  They will protect both the physical aspects as well as the data within the computer for this trip. 

• When the computer arrives, they will insure that there is nothing that can cause a problem with the unit including damage to it, alteration to it, data corruption and viruses can not get onto the unit.

• They will learn all files that are on the computer or unit.  As they do this, they will uncover things like passwords, hidden files, files that may have once been deleted but are still there, protected and encrypted files.

• They will then work on retrieving any vital data supplied in those files.  This will include handling temporary files and hidden files.  Usually they will need to access information located in inaccessible areas of the computer.

• Conduct an analysis and then provide the details to those that need them.  Usually this is in the form of a print out that will list anything that is possibly relevant to the investigation or anything new that was found.  It will detail the system completely, allowing a lay person to understand what the computer forensic specialist has found.

The computer forensic specialist is likely to be a key player in the role of the investigation and may even testify during the court proceedings.