Recovering and Examining Computer Forensic Evidence