Computer forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence. Computer forensics involves the acquisition, preservation, analysis, and presentation of computer evidence.
Computer forensics investigators use their skills to identify and restore formatted, corrupted, deleted or hidden files from computers or other electronic media while maintaining crucial data trails, time & date stamps and accurate chain of custody & controls. They must be able to account for all that has happened to the evidence from their possession to the evidence eventually appearing in court.
By hiring a computer forensics consultant with the proper training and certifications, you can be insured that no possible computer virus is introduced to subject computer during the analysis process, and make sure the evidence is properly handled and protected. This ensures that no possible evidence is damaged, destroyed or otherwise compromised by the procedures used to investigate the computer.
At Preferred Imaging, we do not work on the original files themselves, but create an exact replica to preserve the integrity of case evidence. We can draw on an array of methods for discovering data that resides in a computer system, or recovering deleted, encrypted, or damaged file information. Any or all of this information may help during discovery, depositions, or actual
litigation.
