Forensic Services

Evidence Analysis 

Materials collected during the course of a forensic investigation must be analyzed and interpreted by industry-trained professionals. Familiarity and compliance with industry standards helps ensure that evidence is coherent and sufficient for our clients' needs. Examination of metadata, filesystem history, deleted files and artifacts, and analysis of memory are performed during this process.

Data Acquisition

Digital evidence, much like any other kind of physical evidence, must be properly handled to ensure relevance or admissibility. Evidence can be acquired from any number of sources including hard drives, cameras, personal media players, PDAs, or memory cards each with their own special care requirements. Forensic Digital Detectives are compliant with all Department of Justice requirements for the collection and custodianship of digital evidence.

Forensic Investigation

By utilizing state of the art forensic hardware and software digital investigations can be performed with the requisite care and caution necessary to preserve evidence and recover data. Investigators are trained in the use of the Forensic Toolkit by AccessData as well as complimentary techniques to ensure the most forensically sound and accurate investigation possible.

Forensic Imaging

Imaging is a core discipline of digital forensics and a process during which duplication of media occurs. During this duplication process it is of critical importance that the original media is not  altered and that an exact clone of that media is created. This is accomplished by employing write-blocking technology which facilitates bit by bit data duplication while assuring that no modification is made to the original media. This process is executed by trained forensic examiners and verification of duplicates is documented to ensure accuracy.

Expert Witness