Dig deeper with our forensic examinations
Digital devices such as computers, tablets and mobile phones are an integral part of modern life. Whether at home or at work, most of us spend a significant amount of time using this technology. The reliance on these devices means that the data stored on them can prove vital both in investigations and in support of future legal proceedings.
How can FACT’s forensic services help your business?
Our forensic service can uncover messages, images, documents, internet activity, files and meta-data to help build compelling evidence as part of your investigation. Our experienced forensic experts are ready to assist your investigations with a proven track record of successful prosecutions for cases involving IP crime.
Most people are now aware that deleted does not necessarily mean that data is unrecoverable. Using forensic techniques and the latest forensic software, our team of experts will attempt to uncover information that would not be accessible to the average user.
When dealing with computer based evidence prior to investigation, safely securing and preserving that data is critical to support any future action. Failure to treat electronic evidence in an evidential manner from the very start of an investigation may not only lose data permanently, but also compromise any future findings, no matter how damning they appear. Our forensic service follows the principles of the National Police Chiefs’ Council (NPCC) guidelines when dealing with electronic evidence, to help ensure the data captured is done so in a manner admissible for court, should it be required.
Search and seizure
Our forensic service has extensive experience in the search and seizure of digital devices. Assistance can be provided in a variety of ways, from helping to plan the strategy for the search, attendance at the search to assist with the identification of relevant devices, or on-site data-collection.
On-site data collection
In some instances it may be necessary to collect data at the scene rather than removing and securing the evidence for later investigation. Sometimes this might be simply collection of data from a device that is (or can be) powered off but not taken away. However, there are other occasions where data might need to be captured from a “live” system (powered on).
There may be a variety of reasons for this such as:
- Shared business-critical devices
- Servers containing vast amounts of data unrealistic to capture anything other than selected areas
- Signs or knowledge of encryption running which would risk never being accessible again when the device is powered down
Experience is vital when dealing with on-site collections of a powered-on device. Accessing a “live” system to capture data brings its own dangers and challenges, in terms of the potential modification or deletion of data, or storage/equipment required to do it. NPCC guidelines state that “In circumstances where a person finds it necessary to access original data, that person must be competent to do so and be able to give evidence explaining the relevance and the implications of their actions”. Therefore, it is crucial to seek expert advice before dealing with “live” data. FACT can provide advice and support for the planning of a collection and the performing of a “live” capture if required.
Mobile phone forensics
In the modern digital world it is rare to find someone without a mobile phone and these devices are becoming increasingly powerful and complex. This power and complexity also presents an opportunity to uncover more data than ever before that may be of use to an investigation. A modern phone is no-longer just a source of evidence from contacts, calls and text messages. Instead they might contain chat records, browsing data, notes, emails, images, videos, and much more. FACT will extract this data and present it in an easy to use form for an investigator.
Bespoke examinations and investigations
Some investigations may not always warrant a full detailed forensic examination. Whether this be due to time constraints, budget considerations or as part of a triage process, FACT will endeavour to work with you to tailor the investigation to your requirements.
FACT’s forensic service has invaluable court experience at numerous successful prosecutions regarding IP crime. We can provide experts to attend court and present evidence should it be required.
If you are interested in forensic examinations or would like more information then contact us today.