Certified Computer Forensics
The objective of computer forensic analysis is to determine the facts, as recorded on computer systems and electronic media, in an efficient and non-biased manner.
Computer Forensic Services:
- Recovery of deleted computer files and data; scavenging for lost/deleted files.
- Data Recovery when a hard drive has been reformatted or repartitioned.
- Clean room data recovery for failed drives/raids, or drives that have been intentially mis-treated to try and hide evidence.
- Analysis data carving; including hidden regions of unused space.
- Search for relevant information and determining history, authentication and origin of electronic documents. ( ex: websites that have been visited, files downloaded, files last accessed, deleted files, etc.)
- Discovery of attempts to conceal, destroy, or fabricate evidence.
- Discovery of email messages and attachments sent & received. (Cloud based emails do not apply. Gmail, Yahoo mail, and Hotmail for example are cloud based and data is stored on their servers.)
The Data Recovery Process:
Once we have the drives we will analyze them to determine if there is any physical damage. Whether it's bad heads, dropped drive, smashed drive, run over the laptop with a car, or poured coffee on it; we will rebuild the drive in our clean room with new parts and make a forensic clone of the recovered data off that device. Once we have finished with a sector by sector forensic image of the drive we can move onto the analysis process.
Our Forensic Analysis Process:
- Alandata ensures that electronic evidence is admissible in a court of law.
- Create forensic images and preserve electronic evidence using hardware write-blocker.
- Make multiple copies for plaintiff, defendant, and evidence.
- Search for relevant information and determining history, authentication and origin of electronic documents.
- Perform a preliminary investigation to determine if allegations are correct or if company policy has been violated.
- Using electronic data to reconstruct events or substantiate allegations and claims.
- Use proper tools and expertise/certification to maximize evidence gain and prevent loss.
- Linking evidence together to prove the case.
- Preparing evidence for litigation support, including deposition and expert witness testimony.
- Ensuring the confidentiality of the process and impartiality of the investigator.
We Provide:
- Analysis of computers and data in Criminal Investigations.
- Onsite seizure of computer data in Criminal Investigations.
- Analysis of computers and data in Civil Litigation.
- Onsite seizure of computer data in Civil Litigation.
- Analysis of company computers to determine employee activity.
- Assistance in preparing electronic discovery requests.
- Computer forensics on both PC & Mac platforms.
Why you want a certified forensic examiner:
In the electronic-discovery process, the methods used to obtain relevant data are as important as the data itself. The entire process from start to finish should be handled and prepared to be admissible and hold up in the courtroom.
Issues with doing your own investigation, having internal IT resources, or a non certified computer specialist conducting the investigation include:
Defendant can use anything against you, as the evidence gathered can be scrutinized as not being done the proper way. Evidence may have been tampered, could have been bias in investigation process to add/remove evidence to persuade one side or another, evidence was tampered with and now non of it is admissible as it’s no longer in the original state. The chances of evidence contamination increase when proper forensic techniques are not applied.
Print 
Tech Headaches?
The Certified Forensics Network can help! Call for your FREE consultation:
+1 949 2873282
or send us an email.
Address
Certified Forensics Network
1740 E Garry Ave
Suite #108
Santa Ana, CA 92705
Important Dates
Upcoming seminar dates for earning your CPA credits.