![]() |
| About | Contact | Acquire Data | Resources |
A preliminary computer forensic investigation involves examinations of all pertinent materials, not just the computer or hard drive to focus the direction of an examination. We can then determine whether we need to conduct a level one or a level two examination of the computer and hard drive. In a level one examination, an image is made of the suspect hard drive and the resulting image file is thoroughly examined for evidence pertaining to the case. We use a variety of software approaches to accomplish this. One reason for this is to find every piece of data available for your case. Another reason is for verification. If a computer forensic case goes to court or disposition, the ability to state that we were able to duplicate our results using different methods is frequently the factor to win a case. Click here, or on the "Forensics" link on the right for more information about this level of examination. In a level two examination, every aspect of a level one exam is accomplished, as well as duplicating the hard drive to the exact same model, and visually examining certain aspects of the operating system that cannot be done with just an image file. Click here, or on the "Forensics" link on the right for more information about this level of examination. Call (360) 651-2391 and ask for Steve to discuss how Precise Cyber Forensics can help you with your current data examination or recovery needs.
Precise Cyber Forensics, in co-operation with DeRae Designs, custom builds forensic workstations for the Computer Forensic professional. Click here, or the "Workstations" link to the right to see more information about this unique service.
|
|