The history, present status and the future of computer forensics are discussed. Computer forensics has been driven thus far by the capabilities of the technology. The third generation of computer forensic tools can examine machines in action and can recover information such as the ports in use. The areas of evidence that were previously thought to be unreachable in a forensically sound manner are now achievable by virtue of modern developments.