The document "Forensics in Information Technology" was completed in April 2001 and provides the technical guidance and current best practices for collecting and preserving evidence from computers and networks. An addendum to the document "Recommendations for Work to Remedy Present and Future Shortcomings in Cybercrime Detection" was completed in June 2001.
