Digital Data Preservation

Preserving digital evidence early is a critical first step toward increasing your chances of a successful investigation, litigation or data breach response.

Preserving data is challenging for businesses, law firms and government agencies given the tremendous volumes, sources and types of data which are often involved. This sensitive information must also be secured quickly to prevent it from being overwritten, destroyed or otherwise spoliated. To properly preserve data, the correct techniques and tools should be employed to ensure that all potentially relevant data is captured and file and system metadata remains intact.

Data Preservation is Critical as Data is Fragile

Hundreds of electronic data files change or are overwritten when a computer is simply turned on. Electronic data, including user-created data files, date stamps, RAM memory, internet history and network logs, is inherently delicate and can be easily modified through the course of business. Proper data preservation practices enable you to capture fragile electronic evidence and, if necessary, obtain a forensic image or “snapshot“ for further forensic data analysis.

Reducing Risk through Proper Preservation

Failure to adhere to strict industry data preservation and collection standards may result in the altering or loss of critical data, or exposing you to possible sanctions for spoliation. Kroll Ontrack offers the most practical and cost-effective approach to identifying electronic data for evidential preservation. Whether you wish to preserve the data of a custodian or identify data sources across an entire organisation, the Kroll Ontrack team of forensic and investigative experts help ensure that your data is safely and defensibly preserved.

Back Up Tapes can contain vital evidence you may have overlooked

Incident Preparation is not to be taken lightly. Undertake a readiness review

+44 (0)20 7549 9600 for a discussion with a Computer Forensics expert