Computer Forensics

Forensics Services

Forensics

We are available to provide: Expert testimony Forensic computer examinationsData recovery We specialize in:
Intellectual Property theft casesEmail examinations (including recovery of deleted email messages) Recovering all types of deleted data
NEW! Office 365/Microsoft 365 Online Email Investigations
Example Services
Expert Testimony - Explaining it all to a judge or juryThis is a unique skill that takes experience, knowledge, time, expertise and creativity to make it understandable. Something seemingly as simple as the clock on the computer and whether it is or was accurate or had been changed can make or break a case. What is the significance of the timing of the removable device being attached to the computer (and how do you know it was done?) compared with the times and dates of the critical files? Recovering deleted data: Even after reformatting a disk and reinstalling the Operating System (OS), much data is often still recoverable. Determining when something happened or didn’t happen: Time and date information often need expert interpretation – too many things can impact what affects the values being presented to take them at face value without expert analysis.
More Examples
Email analysis and recovery: Did your client’s critical data just get sent to a competitor? Some email programs store data in multiple locations. Knowing where to look can be criticalDeleted email is recoverable from some applications, not from othersSearching email and attachments can be quite involved and time consumingWeb based email is commonly used in attempts to avoid detection in a corporate environment. Knowing what to look for and where to find it are critical skills Determining if your data just walked out with the departing employee, spouse, or friend. Removable devices are ubiquitous and ever increasing in capacity. Virtually all of a small business’s important data can be literally in someone’s pocket when they walk out the door.

data recovery

Recover your data

There are many reasons to need a data recovery service:Deleted filesHardware malfunctionsErrors when trying to boot systemMedia or electronic failuresFormatting a device by mistake or when attempting to correct system errorsDamage caused by malware, viruses, software or hardware failuresElectrical failures caused by power problems, surges, lightning, static dischargesPower failuresBlue Screen of Death (BSOD) a.k.a. Windows Stop errorsAccidents, floods, fires, and other disasters
Cloud email

OFFICE/MICROSOFT 365

Microsoft/Office 365 is the premier Cloud based colaborative tool set for businesses. It brings a lot of capabilites and potentially a lot of headaches if not set up properly and with security in mind. MFA/2FA should be used on all accounts and must be used for any high risk/value accounts. When an account is or may be compromised, time is of the essence due to the limited time logs and other data is retained. Contact us at once for assistance in analyzing the situation and capturing all the available data.
SSD storage devices
There are unique issues and potential risks with Solid State Devices which can present unexpected outcomes or problems. Best practice is to create a forensic image as soon as possible of the device. If that is not an option, second best is to stop using and power down the device as quickly as you can to best preserve any potential evidence. Contact us at once for further assitance and advice.
Data Recovery from:
  • Any type of digital storage device such as:
  • Disk drives
  • SSDs
  • Flash drives
  • Memory sticks
  • Removable disks
  • Cameras
  • Voice Recorders
  • RAID disks
  • SAN or NAS storage arrays
  • Music players
  • Lost/unknown/forgotten login passwords to systems or files