HOW IS COMPUTER FORENSICS CONDUCTED?
As computer forensic experts, we follow a standard set of procedures. We physically isolate the computer under investigation to make sure valuable digital evidence cannot be contaminated. To achieve this, Computer Forensic Lab investigators will make an exact digital clone of the hard drives or digital media. Once the original hard drives or digital media has been cloned, they are locked in a safe or other secure storage facility to maintain its pristine condition.
All investigation is done on the digital
clones. Computer Forensics Lab will ensure
that all data has been handled within the
accepted legal principles of security,
continuity and accountability.
Any evidence found on the digital clone is carefully documented and analysed in a well-structured and well-presented "fact finding report" so that it can be admissible in any court of law or tribunal.