|
Overview Computer forensics involves properly obtaining,
preserving, examining and analyzing electronic evidence, and presenting that
evidence in clear and understandable terms to all parties, including testifying
about that evidence in court.
Clients
interested in these services include...
- law enforcement and government agencies
pursuing criminal or civil investigations involving the use of
electronic data
- Corporate or individual clients pursuing
investigation, documentation and support reflecting electronic fraud or theft
(either by employees or competitors)
- Attorneys in need of assistance in
understanding evidence being presented in various legal proceedings.
Computer forensics was developed in the late
1980's by a small group of specialized federal law enforcement personnel. (see
history of computer forensics). Their
efforts led to a process that applies today to the preservation and examination
of electronic evidence.
Improper or incomplete examination of electronic
data can lead to incorrect conclusions. Understanding how electronic
evidence was obtained, preserved, or examined is fundamental in representing
clients whether in civil or criminal proceedings.
Thorough examination of electronic evidence
may reveal exculpatory or other relevant information existing on a
computer. These findings can effect the outcome of any proceeding.
Using proper tools (software and hardware) to preserve, examine and document
electronic evidence is essential, whether done by investigative or support
personnel.
|
