HOW IS COMPUTER FORENSICS CONDUCTED?

As computer forensic experts, we follow a standard set of procedures. We physically isolate the computer under investigation to make sure valuable digital evidence cannot be contaminated. To achieve this, Computer Forensic Lab investigators will make an exact digital clone of the hard drives or digital media. Once the original hard drives or digital media has been cloned, they are locked in a safe or other secure storage facility to maintain its pristine condition.

All investigation is done on the digital clones. Computer Forensics Lab will ensure that all data has been handled within the accepted legal principles of security, continuity and accountability.

Our investigators use a variety of techniques and proprietary forensic applications to examine the hard drive clones, ensuring a quick and cost effective way to collect and preserve data or digital evidence that might have been deleted or become inaccessible through normal computing methods. By searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged files, we can determine if certain information exists and if so, where it might be located.

Any evidence found on the digital clone is carefully documented and analysed in a well-structured and well-presented "fact finding report" so that it can be admissible in any court of law or tribunal.