As more and more users go mobile and utilise interconnected devices, computers are often at the centre of incidents and investigations. At the heart of every crime scene (when gathering evidence in an investigation is at issue), exists two basic questions the investigator must address: (1) how would he find and acquire the evidence, and (2) how would he properly document them once found? While physical evidence is tangible, visible and simple to collect, categorised and stored, digital evidence poses some unique challenges. Therefore, locating evidence in digital investigation is the concern of Chapter 33