Computer Forensics is a highly specialist area. It should only be undertaken by experts who have a comprehensive understanding of the legal system, ACPO, (Association of Chief Police Officers), Guidelines, Masters Degree, (or equivalent) in Computer Forensics, and full knowledge of Evidence Handling. Ideally, the company you take to undertake your investigation should be ISO9001 compliant and possibly ISO27001 compliant too.
Calling us after your technical support team have looked at the computer may be too late. Call our Computer Forensics team first for free, confidential and impartial advice on how to effectively manage the forensics situation. Disklabs Computer Forensics is the only sure way of ensuring that your data is investigated professionally and to the exacting standards of ACPO.
Disklabs Data Recovery and Disklabs Computer Forensics and Mobile Phone Forensic Services have many years of experience in the field of storage, recovering data, repairing hard disk drives and examining storage media and hardware. Disklabs Data Recovery and Disklabs Computer Forensics and Mobile Phone Forensic Services deal with clients with investigative requirements in all of the following hardware areas:
■ Digital Fraud
The 4 Most Important Steps of Computer Forensics Investigation
Whatever the case and wherever the problem, the same basic rules of computer forensic investigation must be followed:
1. Adhere to ACPO, (Association of Chief Police Officers)
Guidelines for digital evidence recovery, with a comprehensive auditable process
2.Preserve the evidence.
Data stored on a computer can be destroyed or made inadmissible as evidence very easily. The single most important task is using the correct procedures to get at the data. Vital evidence may lie in deleted files or fragments of past files and, even turning the computer on can result in their permanent loss.
3. Never work on the original media.
Once the computer or device has been identified as containing potential evidence, it must be forensically imaged in order to be examined. Specialist tools and software are used to create legally recognised exact copies of the media for analysis purposes. These copies are not the same as a normal backup. They contain an exact, forensically sound copy of every BIT on the disk or device.
4. Examinations must be repeatable.
Computer Forensics analysis is an exact science. We deal in proof, not speculation.
Human Rights, international law, and protocols from the ACPO, NHTCU, ensure that our evidence gathering is of internationally approved methodologies, and presented in a ‘court ready' statement or alternatively, our “Expert Witness” services may be used.