WHAT IS FORENSIC DATA EXAMINATION & HOW CAN IT HELP MAKE YOUR CASE?
Your firm will enjoy a cost effective means by which digitally stored data is recovered, analyzed, and reported for your litigation through employing specially trained professional forensic examiners. Forensic data examination is largely a time-consuming undertaking that must be handled methodically, following specific protocols.
ACQUISITION PHASE
Throughout this phase, the examiner will perform an Evidentiary Intake of all components provided and establish an evidence chain of custody log that will follow the evidence throughout this procedure. Specific protocols are followed so as not to compromise the integrity of the evidence. There’s important information on the computer chip that is instrumental in the examination. Specialized hardware is employed to acquire the data from the hard-drive.
ANALYSIS PHASE
Usually the longest phase, it is the case parameters that dictate much of the activities performed. In general terms, there is visible and hidden data on the hard-drive and computer chip. These apparatuses contain vast amounts of data about the user, their activities, preferences, and habits, which encompasses more relevant data than the user files for the investigation. This pertinent information contains answers the questions: “who?”, “what?”, “where?”, “when?”, “how?”, and “why?” For the most part, this data is neither visible to nor known by the average user. Examples of this type of information includes but is not limited to: files that have been deleted; attempts made at deconstruction/hiding data; hidden emails and other accounts. The information is then indexed so the examiner can answer the client’s questions. The most labor intensive process during this phase is to manually recover data, such as deleted emails, that cannot be recouped by an automated process.
REPORTING PHASE
This is the most neglected phase. Proper reporting entails giving the client an electronic report, the most effective way to report the vast amount of information gathered.
Contact the Managing Partner, Connie Phillips at cphillips@docusource.us to discover how forensic data examination can help make your case.
