Forensic analysis comprises of tracking the root cause of the issue and to ascertain the damage level caused. The evidence recovery Toronto team monitors the computer logs, hard drives, user actions, etc and compiles the audit logs. While doing so, they need to ensure that data integrity is maintained.