What is computer forensics?
What is computer forensics?
Computer forensics is the collection, preservation, analysis, and presentation of computer-related evidence. Computer evidence can be useful in criminal cases, civil disputes, and human resources/employment proceedings.
Far more information is retained on a computer than most people realize. It’s also more difficult to completely remove information than is generally thought. For these reasons (and many more), computer forensics can often find evidence of, or even completely recover, lost or deleted information, even if it was intenti
Choosing a Computer Forensics Specialist
When you require the services of a computer forensics specialist, don’t be afraid to shop around. There are an increasing number of people who claim to be experts in the field. Look very carefully at the level of experience of the individuals involved (not just the company). There is far more to proper computer forensic analysis than the ability to retrieve data, especially when a case could go to court.
The bottom line is you will be retaining the services of an individual who will likely be called to testify in court to explain what he or she did to the computer and its data. The court will want to hear about that individual’s own level of training and experience, not the experience of their employer. The experience should be specifically in computer forensics, not just in computer science, as skill with computers does not necessarily translate to forensic expertise. Make sure you find someone who not only has the expertise and experience, but who will stand up to the scrutiny and pressure of cross examination. Talk to references who have seen the individual testifying in court and/or depositions.
Computer Forensics in Law Enforcement
If there is a computer on the premises of a crime scene, the chances are very good that there is valuable evidence on that computer. If the computer and its contents are examined (even if very briefly) by anyone other than a trained and experienced computer forensics specialist, the usefulness and credibility of that evidence will be tainted.
If you currently have computer evidence that you have seized as part of an investigation and you are unsure how to proceed, please contact us. We will gladly provide a short consultation at no charge to your department. More in-depth assistance can range from consultation to hands-on help with all steps of the process.
If you anticipate seizing a computer or computer evidence, and do not have the services of a computer forensics specialist, we can provide valuable advice and help on all steps of the process: affidavit and warrant preparation, search and seizure, analysis and court presentation.
Computer Forensics Assistance to Human Resources/Employment Proceedings
Computer forensics analysis is becoming increasingly useful to businesses. Computers can contain evidence in many types of human resources proceedings, including sexual harassment suits, allegations of discrimination, wrongful termination claims, and others. Evidence can be found in electronic mail systems, on network servers, and on individual employees’ computers. However, due to the ease with which computer data can be manipulated, if the search and analysis are not performed by a trained computer forensics specialist, it could likely be thrown out of court.