Computer Forensics is carried out on a daily basis here at IntaForensics, but what’s involved? Computer Forensic Analysis is the methodical examination of digital media, most commonly personal computers, to establish factual evidence of illegal, unauthorised or unusual activities.
Each of our investigations involve four main steps:
- Identification of possible sources of evidence
- Preservation of the evidence by making an exact forensic copy of the original exhibit
- Forensic Analysis of the evidence
- Presentation of the findings
As a brief overview of the Computer Forensic services we provide, let’s take a look at the three examinations we can carry out.
Imaging Only
With ‘Imaging Only’, we will create a forensic image of digital media. This preserves the integrity of the data for proceedings at a later date, and the digital media can then be returned to the instructing party. Imaging will take place on every computer that is brought into the laboratory for testing.
Preview Computer Forensic Analysis
The ‘Preview Service’ is the most basic examination which involves searching the device for readily retrievable data. Once carried out, this service can determine whether the information present would sufficiently warrant a Full Analysis.
Full Computer Forensic Analysis
The most advanced analysis of the Computer Forensics services offered, the ‘Full Forensic Analysis’, will involve the search, recovery and analysis of all data stored on the device. This includes any that might exist in ‘unallocated clusters’ – which is where you may discover files that a user has attempted to delete. While a user may have removed the pointer to the file, the file’s contents may still be available within the device.
A full and complete analysis can be conducted on all types of media, and here at IntaForensics we benefit from extensive combined experience of our team of analysts, as well as access to a wide variety of specialist tools and software.
If you’re interested in finding out whether the IntaForensics experts could help you with your computer forensic requirements, simply give us a call on 0845 009 2600. You can also send us an email at info@intaforensics.com with further details about your enquiry, and we’ll be in touch as soon as possible.