They hacked his computer. Causing modifications to it. How can they prove whatever they found was not planted there?

Usually computer forensics researchers, to have their evidence be admissible, use special devices that block write access to hard drives and such. Else it gets thrown out in court. Why is this different?