The need for computer forensic appears on the cases, where the use of computer technology has involved. It could happen at any stage both investigation and trial commenced. The mechanism of the computer forensics is based on four examinations, defined as: hardware, software, information and network.
Computer Forensics is operated on the basis of investigator's resolution on the need to perform computer examinations. The main documents for that are the Constitution and the Criminal Procedure Code.