What is a Computer Forensic Investigation?
A Computer Forensic Investigation is the capture, preservation, extraction and analysis of digital evidence. It focuses on where the evidence is located, how to access it, understanding what it shows and what to do with it. Whenever electronic equipment has been used, there is a potential source of evidence and information, and a trail to piece together misuse or wrong doing.
Getting it right first time
Without a sound means of evidence extraction, there is a risk that computer forensic activity may be carried out incorrectly and important evidence altered irreparably. This can leave your business exposed to a range of issues including legal complications, financial loss or reputational damage.
Kroll Ontrack’s computer forensic experts are qualified to perform intricate forensic examinations by employing the correct techniques to carefully and accurately contain, preserve and extract critical evidence. It includes the implementation of a strict chain-of-custody procedure and audit trail throughout the analysis of the data. This secure process is imperative should the matter end up in a court of law.
What is involved in a computer forensic investigation?
Depending on the nature of your case, our team of computer forensics experts will carry out an investigation on the device(s) of concern. This may involve a process called ‘imaging’ whereby a forensic copy of the device is taken and examined leaving the original untouched. As required, this imaging process can be executed on, or off-site. A detailed examination of the imaged data is then carried out by a forensic expert, examining both visible and invisible data.
Typical cases we work on include:
- Intellectual property theft
- Suspected inappropriate computer use
- Executive misconduct
- Employment dispute
Expert Witness Testimony
Our computer forensic consultants regularly appear as expert witnesses in both the civil and criminal courts. They have experience in providing expert opinion on various computer related evidence. This can range from the operation of a particular computer system through to the provenance of a single document.
If you would like more information on the services that we offer please call us on 0800 131 31 32 or email us at forensics@krollontrack.co.uk. Alternatively, please complete our Contact Form and one of our team will contact you as soon as possible.
