Proving a computer crime act is a complicated process that is based on digital evidence collecting and efficient forensic analysis. These tasks are even more demanding when we are talking about data platforms, especially an anti-tampering part of that process. In this presentation, you will find information about what digital forensic is and what methods and tools you can use for collecting digital evidence on SQL Server: Auditing, Temporal Tables, Triggers, Log backups, and how Azure can help you to make it more reliable.