Investigative process and the role that forensics plays in the process – Data recovery