When an incident takes place, a criminal will leave hint evidence and remove hint evidence at the scene. This alteration is known as the Locard exchange principle. Several methods have been produced in conventional forensic sciences to strongly prosecute criminals. Techniques used consists of blood analysis, DNA matching and fingerprint verification. These techniques are used to certify the existence of a suspected person at a physical scene. Culley applies this principle when he defines that where there is an communication with a computer system, clues will be left [55].
