It is impossible to imagine life today without digital material. As a result of the explosive growth in the number of devices and their use, the traces produced using these devices have become more and more important in combating crime. This growth requires a new understanding of forensic data analysis: of the way the data on these devices is processed and of the way the traces collected by this processing is analyzed.