4.3 Digital Evidence

4.3.1 Meaning and Scope of Digital EvidenceThe electronic proof: the data stored-or-transmitted (the documents, the messages, the images, the logs, the metadata); the devices' world (the phones, the computers, the servers, the IoT); the Electronic Transactions Act 2063's recognition (the electronic records' legal validity — the admissibility's foundation).4.3.2 Types of Digital Evidence1. The static (the stored data: the files, the photos, the call records).2. The volatile (the RAM's memory, the live connections — the first-response's urgency).3. The network (the traffic, the IP logs, the geolocation).4. The transmitted (the emails, the chats, the VoIP).5. The platform (the social media's world, the cloud's distributed).6. The embedded (the metadata — the creation's-and-modification's trail; the EXIF's lore).4.3.3 Collection and Preservation of EvidenceThe digital chain: the seizure (the device's proper taking — the isolation: the network's cutting — the remote-wipe's prevention); the imaging (the bit-by-bit copy — the original's preservation; the hash's verification — the integrity's mathematics); the analysis (the forensic tools — the recovered-and-deleted's art); the documentation (the examiner's report; the tool's validation); the custody's chain (the U2.3 discipline's digital extension).4.3.4 Challenges in Digital Evidence1. The volume (the terabytes' problem — the relevance's search).2. The volatility (the easy deletion — the anti-forensics).3. The encryption (the access's bar — the compelled-decryption's debates).4. The authenticity (the deepfake's era — the fabrication's detection).5. The jurisdiction (the cross-border…