Computer forensics is the process of collecting legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the information. Computer forensics is applicable in civil proceedings, large and small corporations, a wide variety of computer crime, and corporate mergers. The discipline involves similar techniques and principles to data recovery, but with additional guidelines and practices designed to create a legal audit trail. Sometimes the process requires data recovery first because of sabotage/destruction to the media to cover it up, and then the forensics process can begin, we specialize in both areas.
The objective of computer forensic analysis is to determine the facts, as recorded on computer systems and electronic media, in an efficient and non-biased manner.
Computer forensic analysis process:
- Alandata ensures that electronic evidence is admissible in a court of law.
- Create forensic images and preserve electronic evidence using hardware write-blocker.
- Make multiple copies for plaintiff, defendant, and evidence.
- Search for relevant information and determining history, authentication and origin of electronic documents.
- Perform a preliminary investigation to determine if allegations are correct or if company policy has been violated.
- Using electronic data to reconstruct events or substantiate allegations and claims.
- Use proper tools and expertise/certification to maximize evidence gain and prevent loss.
- Linking evidence together to prove the case.
- Preparing evidence for litigation support, including deposition and expert witness testimony.
- Ensuring the confidentiality of the process and impartiality of the investigator.