Digital Forensic Examinations for Litigation Support and Testimony

Digital forensics is the unbiased, ethical and science-based professional practice of safeguarding, retrieving, investigating and reporting of digital evidence in situations of alleged data misuse. The process usually involves:

• Chain of custody: documenting the 'who, what, when and where' of the history of information that has been created, stored and modified on a digital device. The process of the forensic analysis itself is documented in order to safeguard the integrity of the investigation against alteration, inadvertent modification or spoliation.
• Acquisition: making an exact copy of all data contained on the media, while protecting the data from any changes during the process through 'write blocking.'
• Data recovery: retrieving data that has been previously 'deleted.'
• String or term searching: checking for the presence of programs, graphic images, key words, cryptographic markers or steganography.
• Reporting: analyzing, summarizing, documenting and communicating complex findings in clearly understood language for use in litigation support and testimony.

We have the expertise and experience to search virtually every digital device. For example . . .

• Cell phones
• PDAs and Palm Pilots
• USB keys
• Digital cameras
• Fax machines
• Printers
• Phone systems
• PCs to enterprise servers . any platform, size, or use, from Macintosh laptops to Unix enterprise servers and everything in between

The eForensics difference . . .

With experience as a court-appointed special master and over 30 at-trial or sworn testimony appearances, eForensics provides expert validated forensic findings for administrative, punitive, civil and criminal proceedings - for prosecution or defense.

The eForensics difference is a combination of competence, experience and technology:

• A special expertise in anti-forensics , which is the use of tools, techniques and processes to intentionally modify, alter or eradicate data from a specific digital device involved in a forensic investigative matter. We know the tricks of the trade in attempted data-hiding . . . as very few others do.
• Some of the fastest state-of-the-art technology acquisition tools in the market cut the time required to as little as half or a third of traditional data acquisition methods. Faster data acquisition translates into cost savings for the client. In fact, eForensics is unique in that we customize our use of various search tools based on the specific needs of the case. We're not limited to the strengths or weaknesses inherent in a particular tool. We have invested in our technology and c ombine the strength of several tools to provide the best possible results. Our unique tool set, along with our unprecedented computer power, allows eForensics to handle extremely large sets of data and compile results quickly, efficiently and cost-effectively.
• Superior documentation and presentation of evidence . . . Clearly articulated evidence - especially highly technical information - and courtroom demeanor are critical to building and winning a case at trial. We know this and place these skills as a high priority and core competency.

eForensics has provided litigation support and expert testimony in court for both civil and criminal matters, ranging from felonies to capitol offences, for some of the largest digital forensic examinations in the country, as well as in divorce and property valuation disputes. eForensics builds a bulletproof investigation for trial and deposition review . . . Our testimony has never been overturned in trial .

Our process is client-oriented and designed to facilitate lawyer review and strict evidentiary standards. eForensics creates project plans that clearly define the process, the timing, the costs and the expectations. Detailed process and data documentation assure that evidence is admissible, usable and beyond scrutiny in its integrity.