Computer Forensics

Computer Forensics is a field that historically has been solely in the realm of law enforcement. Forensics experts at the FBI have for years investigated computer intrusion cases. Currently, law enforcement agencies at all levels are adding Computer Forensics experts and seizing computers in criminal investigations because computers and their storage units often yield a wealth of evidence including business records, documents created or received from others, emails sent and received, addresses of correspondents, web sites visited, and content downloaded. Forensics experts have found valuable evidence on seized computers in cases ranging from corporate fraud to organized crime activities to terrorism. This evidence has led to numerous successful criminal indictments and convictions.

Today Computer Forensics is playing an increasingly important role in civil cases. For example, proving allegations that evidence has been spoiled by failure to preserve emails can be shown with the forensic recovery of deleted files. Establishing wrongdoing by an employee prior to termination and/or prosecution through examination of the employee’s at-work computer is another application of digital forensics evidence gathering. In many civil matters, the domain of Computer Forensics coincides with the heart of the case, such as searching for evidence of fraudulent misrepresentation, misappropriation of intellectual property, falsification of records, or collusion in the course of price-fixing, contract award, or concealment of product defects.

Jeff Parmet and Associates, LLC has the technology, training and experience in a broad range of Computer Forensics areas to provide the assistance you require. Our practice leader in this area is certified in Computer Forensics as an EnCase Certified Examiner (EnCE), which covers the field in general, and in particular the use of the leading forensic tools, the EnCase Forensic software.  Our services include:

• Acquiring digital evidence through forensic imaging of hard drives, from laptops, desktops, file servers or email servers, and from independent media, such as CDs, DVDs, Zip disks and backup tapes;
• Adherence to strict chain-of custody-protocols for proper evidence handling;
• Creation of working copies of media while preserving all evidentiary copies in secure storage;
• Reconstruction and analysis of databases or other business records acquired by imaging or as produced by opposing parties in not-so-readable raw computer formats;
• Recovery of deleted materials, including erased files and Email messages; conversion of file fragments, file slack, and unallocated disk space into searchable files;
• Reconstruction of timelines, authorship, and chain of editing activity for computer-prepared documents;
• Analysis of relevant files; creation of searchable directories and media (e.g., CDs);
• Use of industry standard forensics tools including Encase Forensic Edition v.6;
• Examination of Computer Forensics work by opposing experts, to test for correctness of procedure, integrity of protocol, and soundness of findings;
• Written reports and declarations of findings and conclusions;
• Testimony in support of analysis performed and opinions reached.

Click here for information about our Electronic Discovery services

© 2003-2008 Jeff Parmet and Associates LLC. All rights reserved.