26 No.14 Cybercrimes 2015 can not be done without the use of force or due to resistance from the part holding data or evidential value of data can be preserved through the order of the court, a law enforcement officer may apply to court for an order for the disclosure or preservation. Use of forensic tool 37.-(1) Where a law enforcement officer is satisfied that essential evidence cannot be collected under this Part, he may apply to the court for an order to authorise the use of a forensic tool. (2) The application under subsection (1) shall contain(a) the name and address of the suspect; (b) a description of the targeted computer system; and (c) a description of the intended measures, purpose, extent and duration of the utilization. (3) The law enforcement officer shall ensure that any modification made to the computer system or computer data of the suspect are limited to the investigation and that any changes reversed after the completion of the investigation is restored into the system. (4) During investigation, the law enforcement officer shall log(a) the technical means used and time and date of the application; (b) the identification of the computer system and details of the modification undertaken within the investigation; (c) any information obtained; (5) The information obtained under this section shall be protected against any modification, unauthorized deletion and unauthorized access. (6) The authorization under this section shall be valid for a period of fourteen days.