Forensic Services:

 
Digital Evidence Preservation (or Forensic Imaging)


'Forensic imaging' is the process used to make a complete copy of all accessible data (such as document, picture and E-Mail files) stored upon a piece of computer media (examples of which are hard disk drives, memory sticks and Compact Discs).
  This process is used to generate a 'working copy' of such media, thus allowing a lawful investigation to take place whilst not modifying the original media (routinely called the 'primary evidence').

The 'imaging' process (which can take place in our laboratory or on-site at any given location) is carried out using industry standard computer equipment that has been developed specifically for the purpose of preserving digital evidence. 

Working copies created in this 'forensically sound' manner are accepted worldwide by both civil and criminal courts.  In the eyes of the law, a properly created 'working copy' is as good as the original media it was generated from.
 

Digital Investigations (or Forensic Analysis)


Once the evidence in any investigation has been preserved (see previous section), an investigation to establish or verify the facts (or offer an opinion) can commence.

There are many common types of investigation that we carry out on a routine basis, a handful of examples follow;

  • Inappropriate Internet usage.
  • Intellectual property theft.
  • Unauthorised access to computer data.
  • Online identity theft.
  • Matrimonial disputes.
  • Fraud.
  • Copyright issues.
  • Counterfeit computer hardware/software.
  • Libel actions.
  • Forensic accounting matters.
  • Verification of a Police experts evidence.
  • Computer misuse act offences.
  • Review of case papers.
Forensic Investigators Written Report (or Expert Witness Statement)


Once an investigation has been completed, or a significant milestone is reached, a written report is usually produced to document the evidential findings of our investigator.  This report contains all the information required to proceed with your matter further (be this to court, a disciplinary hearing, litigation or some other course of action).

All of our reports are written in plain English, with all technical 'jargon' explained using layman's terms.  This allows you, the court or an employee to fully understand the evidence being presented, without being overwhelmed with raw unexplained technical information, which may be interpreted incorrectly.

As our reports are produced by experienced highly qualified investigators, they are also admissible in a court of law, and can mean the difference between a case being settled outside the court room - as opposed to being argued within.
 

Digital Evidence Presentation (Small to Medium sized investigations)


In certain scenarios quantities of evidence located during an investigation are not suitable for presentation in a written report (previous section).  One example would be the requirement to review many E-Mail messages or digital documents (such as those produced by common applications such as Microsoft Word, Excel, PowerPoint and Access) that have been uncovered during forensic analysis.

We offer a number of solutions for the review of small to medium quantities of digital documents, the most common method for such quantities is to produce a series of 'Evidence Review' Compact Discs (see picture right).  These discs allow you, to safely review the contents of E-Mail messages and other digital document types using nothing more than web-browser software (that you are using to read this very web-page) and the CD drive fitted to your computer.

Once digital document files of evidential value  have been identified by this process, our investigator can produce a written report that focuses in on these key pieces of evidence.  No special computer knowledge is required to operate our Evidence Review discs, a demonstration is available on request.
 

Digital Evidence Presentation (Large or Enterprise sized investigations)

 

For large or enterprise scale investigations where tens, hundreds or even thousands of computers are involved, a bespoke E-Discovery solution is required.  This means that all of the digital documents recovered from the computers targeted in the investigation are filtered, have duplicates removed and are then piped into a purpose built computer system, where they are processed collectively (as opposed to being split across a number of CD's as in smaller investigations).

Once the digital documents have been transferred to the E-Discovery system, tasks such as the removal of corrupt (unreadable) data, the de-protection of password protected documents, bates numbering and language translation (if required) can take place.

After these tasks have been completed, the resulting documents are made available to view over a secure internet connection, meaning that your legal team can review, print or search the resulting documents from their office via a web browser (the program you are using to view this webpage).  As the review takes place over the internet, your legal team can carry it our from anywhere in the world.  No specialist computer knowledge is required to operate our internet based viewing software, a demonstration of this system is available on request. 

 
Mobile Telephone and Satellite Navigation Forensics

We offer comprehensive services in relation to these devices,  click the links below to see our services relating to each.

Satellite Navigation

 

 


Mobile Telephones