Collecting, extracting, interpreting and presenting digital evidence stored in computers
Computer Forensics involves the analysis of Electronically Stored Information (ESI) via a methodical approach that adheres strictly to ACPO Guidelines and best practices. With over 2 billion personal computers being used worldwide, data stored on desktops, laptops and hard drives are now an integral component in establishing factual information within civil and criminal cases.
A computer forensic investigator is not an IT technician. Years of training and ongoing development is standard, as deciphering binary and metadata on a computer can be as complex and precise as understanding human DNA. To have a computer involved in a case should be viewed as an absolute asset, as the quantity, variety, and potential value of data stored on the hard drive can be invaluable. However, if best practice guidelines are not followed, and forensic experts are not deployed, evidence can be lost forever and it becomes inadmissible in court or at tribunals.
The CYFOR investigations team can add significant value to your case through properly obtained computer evidence including:
- Email correspondence including deleted emails
- Internet activity
- Stolen electronic data / intellectual property
- Password cracking
- Deleted files & folders
- Creation times and dates
Our skilled computer forensic experts are experienced in the following:
CYFOR employ the latest techniques and software (such as AccessData) to search, identify and categorise the relevant data within an investigation.
Recovery of deleted data
Deleted doesn’t mean unrecoverable and CYFOR’s computer forensic specialists have extensive expertise, spanning a broad range of investigations. They will produce a full technical report detailing all of the forensic analysis findings, placing your enquiry in the safest and most experienced hands.
Analysis of retrieved data
The search, recovery and analysis of data stored on computer devices can be crucial within civil and criminal matters. This can include data that has apparently been deleted from a device such as a computer, laptop or hard drive but in actual fact is still present. The analysis we provide includes a full break down of the relevant findings, which can be presented in court by our Expert Witness trained investigators.
Onsite Data Collection
CYFOR have the full forensic capability for onsite data collection and are called upon frequently to execute covert data collections. So whether an exhibit is deemed too important to exit the premises, or an employee’s device(s) need ‘imaging’, we can assist immediately.
We also employ a 24 hour contact number for emergency situations – 0800 169 4442.
Imaging of Devices
‘Imaging’ is an exact forensic replica of digital media stored on a devices hard drive. This preserves the data for court proceedings or investigations that occur at a later date and allows the original device to remain intact. This is especially useful in covert operations.
CYFOR are computer forensics specialists and have over a decade of experience in the investigation and examination of digital computer information.
We utilise the latest forensic software such as EnCase to provide complete and thorough Computer Forensic Analysis and are proud to have leading industry experts at our disposal, including ex-military forensic investigators.
CYFOR adhere to the Association of Chief Police Officers (ACPO) Guidelines and use the latest computer forensics examination techniques to provide a profile of usage to ensure the highest quality of investigations and reporting is adhered to.
Benefits of using CYFOR include:
- Experienced case managers
- Court trained forensic investigators
- ISO 9001:2008 Accredited
- Court ready reports from industry experts
- Secure collection and delivery of exhibits via security cleared CYFOR couriers
Please contact us on 0207 438 2045 to speak with a dedicated Criminal Case Manager, who will be happy to assist you.
Alternatively, please email firstname.lastname@example.org