Computer forensics is the collection, preservation, analysis, and court presentation of electronic evidence. The proper collection and analysis of computer evidence is critical in many civil litigation and corporate internal investigations. The examiner must be able to establish in a court of law that the subject computer evidence was not corrupted or tampered with. The techniques we use enables the non-invasive recovery of all existing information on the subject drive, including deleted files and fragments, while preserving a proper chain of custody under standard computer forensics protocols.
In todays business world, the vast majority of documents now exist in electronic form. Any investigation involving the review of documents, either in a civil or corporate setting, is not complete without including properly handled computer evidence. Computer forensics ensures the preservation of computer data, which can be easily altered, erased or subject to claims of tampering without proper handling. Additionally, computer forensics greatly facilitates the recovery and analysis of deleted files and many other forms of compelling information normally invisible to the user.