Forensics

Forensic Computer Investigations - Computer Crime, Electronic Evidence & Expert Witness services. Dataclinic offer to investigate all matters of computer related crime and misuse. Our experts are trained to examine computer systems and equipment using methods and procedures such that their findings will be admissible in a court of law. We offer * Preliminary consultation * Procedural advice * System assessment * On Site and laboratory investigations * Comprehensive detailed reports * Witness Statement * Expert testimony All work is carried out to current forensic best practice and contemporaneous notes and records are kept throughout Client matters and case-related communications are strictly confidential. Investigative Services We are able to undertake both on and off-site investigations and as a general rule will use the following stages in our project implementations. Consultation The science of computing and the laws of evidence are complex, we therefore insist that prior to any specific computer forensic investigation being initiated that a protocol for our engagement is established, and that this protocol is fully understood and capable of being implemented by all the parties involved in the planned investigation. To achieve this we will consult with a client to: * Establish specific roles for individuals and organisations to undertake. * Identify where matters of evidence are likely to be located. * Undertake an intelligence review * Establish systems and material that relate to the case. * Plan the acquisition of data and reporting of information. * Estimate timescales and costs * Present formal terms of engagement and confidentiality. System Audit and Data Collection Following our initial consultation and given your authority to proceed, we will disarm systems and components making it improbable for subsequent changes to be made to their content or configuration. Data collection is then undertaken with applications who's use is de-facto in forensic investigations involving information stored on computers. Securing Evidence In matters of evidence it is mandatory that a strict "chain-of-custody" is followed and all items are preserved should third party or further analysis be required. Recovery Dataclinic uses applications to recover and duplicate the suspect media. Using the duplicate media our forensic experts will then investigate this for matters of evidence. Forensic Analysis Our computer forensic analysts are always operating under the primary instruction and guidance of you the client or your legal counsel in any particular matter. Dataclinic experts are able to advise, interpret and piece together information for you in a comprehensive manner and detail a thorough account of events, computer usage and content. Using forensic image files our expert analysts investigate the media and its content including altered, damaged, removed, hidden or deleted data or data from inactive or unused storage areas on the media. They then provide an historical ledger of the relevant content contained in the files. Expert Testimony and Reporting Once the investigation is complete we will support your case by preparing and submitting reports concerning the evidence found, and the means by which it was discovered. We will also provide data for affidavits or other pleadings, expert testimony and reports. Termination The Dataclinic terminates its involvement by submitting the total data collected in a readable format either electronic, print for archive or to an existing litigation support database upon request. We will then consult on the storage and preservation of evidence in the event of appeal or review etc. Please call 0870 140 2525