Forensic Examination
|
Computer Forensic Examinations
Examination of computer media where there is suspicion of illegal
activity. The examination will be documented in an Investigation Report
which, if necessary, will be supported with exhibited evidence and Witness
Statements.
Expert Witness
Where the interpretation of computer evidence is disputed then each
interpretation, together with supporting documents and analysis will need
to be put before a jury.
Analysis of Prosecution Evidence
Reports and statements detailing the prosecution examination of computer
evidence can be highly technical and peppered with jargon. While most
good investigators try to explain in simple terms their reasoning for
reaching a certain conclusion not all explain why alternative
interpretations have been discarded (if considered at all).
Procedural Advice
Even the most astute technical engineer may be unfamiliar with the
correct procedure for maintaining the chain of evidence where a crime
or misconduct are suspected. The easiest way to corrupt evidence held
on a computer is to turn the computer on and look for it.
Covert Imaging
Situations can arise where an investigation is required without
alerting the suspect. This can be done by imaging the suspects
computer media out of normal working hours. The examination can then
be undertaken away from the suspect without their knowledge.
Forensic Data Recovery
The recovery of data deleted, either accidentally or maliciously while
preserving the evidential integrity of the data.
Standard Data Recovery
The recovery of data that is no longer accessible without the need for
forensic integrity.
|
|
"Thank you so much for the comprehensive and efficient service
I received when my laptop broke recently. The problem was diagnosed
and resolved swiftly allowing me to access all my files..."
Miss W, Corsham
|
|