This presentation will introduce the basic model for forensic recovery of data in civil and criminal contexts. Technical challenges of acquisition and analysis will be briefly covered but the primary emphasis will be on the requirements of bringing data to court. Common tools will provide examples to illustrate the model. There will also be a brief discussion of provisions of the enforcement mechanisms of the Digital Millennium Copyright Act and recent case law dealing with failures to comply with production of evidence.