Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

Corroborating evidence is evidence that confirms or supports other evidence already presented in a case, rather than a standalone collection of facts used to infer a conclusion through deduction.

Direct evidence proves a fact directly without requiring inference, such as a witnessed action or a signed confession, and does not depend on combining multiple facts to draw a conclusion.

Circumstantial evidence is indirect evidence that individually does not establish a conclusion but collectively supports an inference about a malicious act or actor, relying on logical deduction from the combined set of facts. Unlike direct evidence, it does not directly prove the fact in question but instead creates a chain of reasoning that points toward a probable conclusion. It is widely used in digital forensic investigations where direct proof of intent or action is unavailable but supporting facts can be assembled.

Incontrovertible evidence describes evidence that is irrefutable and cannot be challenged, which refers to the strength or quality of evidence rather than its inferential nature.