Evidence that supports the conclusion that a person committed an offense. In digital investigations, this can include authenticated messages, device artifacts showing creation/possession, login records, file transfers, or coordinated activity across accounts and devices.
