In law enforcement circles, “forensics” means a well-defined set of discovery and investigative processes that hold up in court for civil or criminal proceedings. An enterprise that relies on these tools’ records or analysis in, for example, a wrongful termination suit, is probably in for an unpleasant surprise. One gotcha of using EDD tools for legal purposes is proving the inviolability of the data. To thwart insider manipulations, critical functions such as setting up new vendors or changing payment destinations should require multiple levels of approval.”]
Source: https://taosecurity.blogspot.com/2006/04/forensics-warnings-from-cio-magazine.html