The simple definition of computer forensics is; the art and science of applying computer science to aid the legal process. Although plenty of science is attributable to computer forensics, most successful investigators possess a nose for investigations and for solving puzzles, which is where the art comes in. - Wikipedia, 2008
Our computer forensic experts provide High Tech Investigations, Electronic Discovery Litigation Support, and IT Consulting Services using state-of-the-art forensic hardware and software that is recognized up to and by the United States Supreme Court. Our mastery of Computer Forensics goes way beyond our use of the most sophisticate forensic tools available. Our Computer Forensic Engineers are also Computer Network Systems Engineers, Trained & Licensed as Private Investigators, and have extensive experience in Electronic Discovery Litigation Support. This important integration of professional skill sets ensures that our clients receive the highest level of expertise beginning with our first consultation and ending with the delivery of compelling and admissible expert witness testimony. Our Computer Forensic Engineers adhere to a standard protocol made up of 5 phases. Consultation, Data Collection, Forensic Recovery & Analysis, Results & Reporting, and Affidavits & Testimony. Phase 1 - Computer Forensics Consultation Preparing for litigation involving Electronic Discovery is commonly viewed as a chess match between opposing attorneys. It is during this critical planning phase that the groundwork must be laid for Discovery Motions & Orders. Our Forensic Engineers work closely with attorneys throughout this phase. Our extensive “Case Law” resources serve as an invaluable reference to ensure that every Order encompasses the necessary scope of material. Phase 2 – Computer Forensics Data Collection The all important task of assuming custody of electronic evidence must be performed in a manner that maintains strict adherence to “chain-of-custody procedures”. It is equally important to ensure the proper resources are in place to facilitate securing all discoverable media as quickly as possible. Our clients rely on our expertise to guide them through this process and to oversee critical procedures and requirements. Phase 3 – Computer Forensics Recovery & Analysis The process of recovering the electronic data from the “source hard drive(s)” must be accomplished by an approved method. The use of equipment and software that has not been recognized by the courts poses many risks to the integrity of the forensic process. Our Forensic Engineers use EnCase, a forensic software acquisition and analysis system recognized by all courts, including the United States Supreme Court. One of the most significant aspects of the computer forensic process is the analysis phase. It is during this phase that the expertise of Forensic Engineers makes all the difference in the world. This phase relies on technical knowledge, investigative skills, reporting procedures, and overall knowledge of the advanced features of computer forensic systems. We are currently the only private Computer Forensics organization to require Forensic Engineers to also maintain a Private Investigator License issued by the California Bureau of Security & Investigative Services and the Virginia Department of Criminal Justice Services. Phase 4 – Computer Forensics Results & Reporting After the analysis is completed it is crucial to provide seamless communication with attorneys and clients. Experience has taught us that this must be done in terms that all parties can understand and collaborate with. Equally important is the reporting process which must always be prepared as a courtroom worthy document. From cases with one hard drive to complex litigation cases involving multiple sites and expanded networks our Forensic Engineers are prepared to apply over a quarter century of experience. Phase 5 – Computer Forensics Affidavits & Testimony Our experienced Computer Forensic Engineers can provide affidavits and expert testimony. It is imperative that an expert witness possesses the communication skills necessary to deliver presentations and verbally translate that information in understandable terms to jurors.