The following section will consider advantages and limitation of the first two mentioned types of digital forensics: Traditional (dead) and Live computer forensics. TRADITIONAL (DEAD) VS LIVE DIGITAL FORENSICS Traditional (Dead) Forensics In order forensic acquisition to be more reliable it must be performed on computers that have been powered off. This type of forensics is known as ‘traditional’ or 'dead ' forensic acquisition. The whole process of dead acquisition, including search and seizure flowchart and acquisition of digital evidence flowchart is shown on Figure 2 and Figure 3 respectively. During this process the investigators should carefully search for all forms of potential electronic evidence that they do have permission to take such as: USB (Universal Serial Bus) storage media, optical discs, mobile phones, tablets, laptops, SD (Secure Digital) and similar cards, NAS (Network-Attached Storage). Other forms of forensic evidence should be also considered such as: fingerprints and DNA before collection of devices, passwords, notes, paper documents, and other information relevant to the investigation. The process of dead forensic is simple, reliable and thorough. The main strength of the dead forensic is precisely defined process of acquisition. The acquisition process can be verified at any time. The process of dead forensic acquisition is simple and does not require very strong programming knowledge. If the acquisition process is strictly followed by the