Cell Site Analysis
facebooktwitter

Computer Forensics

Computer Forensics - Find Evidence ButtonCalling us after your technical support team have looked at the computer may be too late. Call our Computer Forensics team first for free, confidential and impartial advice on how to effectively manage the forensics situation. Disklabs Computer Forensics is the only sure way of ensuring that your data is investigated professionally and to the exacting standards of ACPO.

Disklabs Data Recovery and Disklabs Computer Forensics and Mobile Phone Forensic Services have many years of experience in the field of storage, recovering data, repairing hard disk drives and examining storage media and hardware. Disklabs Data Recovery and Disklabs Computer Forensics and Mobile Phone Forensic Services deal with clients with investigative requirements in all of the following hardware areas:  


■ Digital Fraud
■ Inappropriate Data Duplication
■ Unauthorised Data Duplication
■ Bankruptcy Data Investigation
■ Private Investigation of PC
■ Private Investigation of Mobile Phone
■ Private Investigation of PDA
■ Blackberry Forensic Examination
■ Disloyal Employees
■ Forgeries
■ Murder
■ Theft
■ Assault
■ IP Theft
■ E-Stalking
■ Breach of Contract
■ Computer Break-ins
■ Phone ‘Phreaking'
■ Digital Pornography
■ Inappropriate Internet Usage
■ Internet Abuse
■ Inappropriate Email Usage
■ Email Abuse
■ Industrial Espionage

The 4 Most Important Steps of Computer Forensics Investigation


Whatever the case and wherever the problem, the same basic rules of computer forensic investigation must be followed:

1. Adhere to ACPO, (Association of Chief Police Officers)
Guidelines for digital evidence recovery, with a comprehensive auditable process

2.Preserve the evidence.
Data stored on a computer can be destroyed or made inadmissible as evidence very easily. The single most important task is using the correct procedures to get at the data. Vital evidence may lie in deleted files or fragments of past files and, even turning the computer on can result in their permanent loss.

3. Never work on the original media.
Once the computer or device has been identified as containing potential evidence, it must be forensically imaged in order to be examined. Specialist tools and software are used to create legally recognised exact copies of the media for analysis purposes. These copies are not the same as a normal backup. They contain an exact, forensically sound copy of every BIT on the disk or device.

4. Examinations must be repeatable.
Computer Forensics analysis is an exact science. We deal in proof, not speculation.
Human Rights, international law, and protocols from the ACPO, NHTCU, ensure that our evidence gathering is of internationally approved methodologies, and presented in a ‘court ready' statement or alternatively, our “Expert Witness” services may be used.

Computer Forensics Enquiry

Harlan is the Director of Operations and oversees the complex RAID Recoveries
RAID Recovery - Harlan Simpson's Email