With the all attention given to cyber crime the WIOC (Western Information Operations Center, U.S. Army Reserves) will present on computer forensics for gathering and analyzing data in such a way it is relevant and free of bias all to find out what happened on a computer system. As our ability to make coding enhancements to applications and operating systems develops it turns out that more artifacts of a computer forensic value are found. Discussions will center on the tools (both commercial and open-source) which used in computer forensic examinations and how they play in gathering and reconstructing data. Best practices and analysis tips will be covered to build interest and enlighten attendees of the sources of digital information. Extra emphasis on volatile data collection and relevance and its role in supporting persistent data analysis will be presented.