It explains the nature and unique aspects of computer-related crimes, including its hidden nature, the destructibility of evidence, and the difficulty of identifying perpetrators. Techniques commonly used in computer-related crimes are described, including data diddling, the Trojan horse method, salami techniques, superzapping, trap doors, logic bombs, scavenging, data leakage, piggybacking, impersonation, and wiretapping. Problems of proof are detailed, including charging a case, the use of experts, the use of demonstrative evidence, discovery and inspection, subpoenas, the maintenance, the handling of prosecutor-investigator relationships, and methods of educating the court. Evidence law related to search and seizure, discovery, admissibility, and laying a proper foundation for computer-produced evidence is explained. Procedures and guidelines that investigators should follow in planning a computer-related investigation and handling computer evidence are also detailed. Areas covered include preliminary investigative matters, computer surveillance techniques, planning a computer crime search and seizure, the execution of a microcomputer site search, the collection and preservation of computer evidence, computer disk analysis, and the use of a computer as an investigative tool. Footnotes, appended tables of cases and statutes, appended sample language for a subpoena schedule and search warrant affidavit, and appended list of methods for processing computer evidence.