| Computer
Forensics
Computer Forensics is the art and science of
discovering deleted, hidden and lost data on Computer Media. While
it is difficult to rid computer media of this data, time is of the
essence here as well. While deleted data is not really deleted, it is
available to be overwritten by new data. The more the computer is used
after the data is deleted the higher the chance that the deleted data
will be overwritten with new data.
Searching computers for data without the right tools and training can
ruin it as evidence in court. Just booting up a computer can cause
changes to dozens of files including date and time stamps. If you have
changed data, date and time stamps on evidence that later becomes
evidence in a court proceeding it may end up not being accepted as
viable evidence.
Data Acquisition
CSI LLC has the facilities, special equipment, training and experience
to acquire evidentiary data for you. We will acquire an exact duplicate,
bit-stream, mirror image of the computer media to be used for analysis
while protecting and preserving the integrity of the data on the
original media. We will maintain the chain of custody on all data so it
can be used if needed in a court of law.
We will provide references on request.
|