WHAT IS INVOLVED IN COMPUTER FORENSICS?

Any data forensic investigation will involve the following steps:

  • Identification of all possible sources of digital and computer evidence;

  • Taking all actions necessary to preserve all the digital evidence under investigation;

  • Carrying out full computer forensic analysis of digital evidence;

  • Structured presentation of the all the findings in an appropriate and compliant format;

All data forensic investigations carried out by Computer Forensics Lab, will follow strict quality assurance guidelines guaranteeing the highest quality and standard.

The appointed computer forensic analyst conducting the investigation, will be responsible for ensuring that all legal requirements are taken into account and the evidence is not contaminated throughout the period the data forensic investigation is underway.

Computer forensics, data forensicsA computer forensic investigation is a thorough analysis of all the information stored within a computer or any attached storage device to determine any user activity and establish the identity of the user or users. Any document created or any activity undertaken by a computer user, will leave a trail of evidence that can be invaluable in any data forensic investigation. A forensic expert can piece together all the collected information to reveal a computer user’s conduct, sometimes even years after the events took place.

For example, a data forensic investigator can establish things like who logged on to a single computer or network of computers and when; what documents were opened, read or changed; when which documents were seen by whom; which documents contain certain words or phrases; what documents have been copied, printed or emailed out; when what websites or other external computers have been visited; what data has been downloaded, removed, deleted or sabotaged; what storage devices have been attached to a computer; whether anything was copied to or from any storage devices; what communication the computer or computers under investigation had with the outside world via the the internet or an internal or external network; where an email came from and who viewed and/or responded to it.

Some of our data forensic service aspects include:

Computer forensic analysis preview: This will involve the interrogation of the live data storage devices. This form of analysis will identify if there is any information present that would sufficiently warrant a full data forensic analysis of all computer-related media.

Full computer forensic analysis: This will involve the investigation of all data storage devices related to a submitted exhibit including the recovery and analysis of data from unallocated spaces, damaged partitions, sabotaged media or deliberately deleted files or folders.

The computer forensic analysis process relies on the complete integrity of the data which is guaranteed through a fully auditable trail and a strict adherence to the ACPO guidelines (Association of Chief Police Officers Guidelines).

For any computer forensic service consultation, more information or enquiries please do not hesitate to speak to a professional by calling 0800 840 2131 (Free from a landline) or 0333 5 777 120 (Local rate from a mobile or landline). You can also use our fax 0208 368 2156 or submit your query. In all communications with our clients, full discretion and confidentiality is guaranteed.