Services
Computer Forensics
We identify, collect, preserve and analyse digitally stored data using specialist hardware and software following electronic evidence best practice ensures our work is admissible by the courts. Though the vast majority of cases never reach this stage, we ensure that all our clients are armed with the highest quality, compelling evidence.
We strive to make our communications with our clients clear and concise, while the reports we produce are readable and credible, often proving to be the deciding factor in a dispute.
Even if the data has been deleted or hidden it doesn't mean that it isn't recoverable by forensic analysts. Counter to this we can also assist if you need your data to be securely wiped making it impossible for anyone to recover.
Where we can help
Computer forensics specialists are needed wherever you suspect that a computer may hold information relating to a person's conduct which you may need to take action against.
An example of some of the areas we can help in:
- Intellectual Property theft
- Industrial espionage
- Employment disputes
- Fraud investigations
- Forgeries
- Matrimonial issues
- Bankruptcy investigations
- Inappropriate email and Internet use in the work place
- Disloyal employees and other HR matters
- Any cases where evidence relating to a dispute is stored electronically
How we can help
Securing the continuity and validity of electronic data in proving computer misuse or criminal activity can be a real issue. Problems can arise within companies when IT staff or senior management fail to resist the temptation to investigate equipment themselves which can have serious consequences. One of the most crucial elements of computer forensic investigations is the preservation of evidence and ‘non experts’ can easily overwrite vital information by accessing material themselves.
Well-meaning but misplaced actions can alter a file's date and time stamps, overwrite log-files which contain crucial information and would produce temporary files. The time and dates stamp elements are particularly important in working environments where more than one person has access to a piece of equipment, e.g. a computer in an open office used by several members of staff during the day. It would be impossible to prove when a suspect last viewed or modified a file when that date and time information had been replaced by actions from the IT staff trying to resolve the situation. Even printing a document of interest will also over-write who last printed it and when.
In short, various changes are made by those who do not understand the scope or extent of those changes, which has been compared to the first person at a murder scene picking up the knife next to the body.
Forensic Control limit the potential of data damage and destruction by following industry best-practice which in the United Kingdom is the Association of Chief Police Officers guidelines for retrieving electronic evidence. We ensure that the investigator knows how and where to look for information without compromising any potential evidence.
