Thursday, 21 January 2016 00:00

Slide background Have you recently received digital evidence?

Rate this item
(0 votes)

Be careful not to compromise any future computer forensics claim. It is easy to act with best intentions, but speak to us first!

A guide to handling electronic data and digital files....

The ease with which electronic documents can be created, copied, distributed and stored, and the frequency with which networked computers are backed up, means that the volume of potentially relevant documents can be staggering. It is easy to compromise electronic data if it is not handled in the correct way.

As soon as you suspect that relevant data may exist on a device, do whatever is within your power to assure that it remains untouched. It is human nature to want to “check out” possible evidence, but doing so risks compromising the evidence. If the computer is on and there is any reason to believe it might be “booby trapped” to destroy data - if it is not shut down in a certain way, simply unplug the machine from the electrical source.

Even if you do not currently have physical custody of the computer, an expert can help the solicitor explain to the Court how and why obtaining a forensic image of the computer may be crucial to the case. That is, the computer may contain hidden or deleted files that could bolster the case, and an expert can help assess that possibility.

It is important to maintain an audit trail of exactly what actions were taken and by whom. When did you receive custody of the evidence, what handover documents were created, where was the evidence stored and who has had access to it pending investigation? If you have accessed the data, how was this done and who witnessed it. Accessing data can often write further information to the media, so it is crucial to use a write blocker.

Before accessing any data or files, give us a call on (800) 659-3012. One of our consultants can talk you through how to view the data without compromising any future claim. They will gladly discuss your concerns and give you a realistic opinion of whether a forensic investigation is worthwhile.


Last modified on Friday, 22 January 2016 12:30
Data Recovery Expert

Viktor S., Ph.D. (Electrical/Computer Engineering), was hired by DataRecoup, the international data recovery corporation, in 2012. Promoted to Engineering Senior Manager in 2010 and then to his current position, as C.I.O. of DataRecoup, in 2014. Responsible for the management of critical, high-priority RAID data recovery cases and the application of his expert, comprehensive knowledge in database data retrieval. He is also responsible for planning and implementing SEO/SEM and other internet-based marketing strategies. Currently, Viktor S., Ph.D., is focusing on the further development and expansion of DataRecoup’s major internet marketing campaign for their already successful proprietary software application “Data Recovery for Windows” (an application which he developed).

Leave a comment

Make sure you enter the (*) required information where indicated. HTML code is not allowed.