![]() |
(425) 200-4271 9 am - 4 pm Pacific Time Request a Consultation |
![]() |
|
![]() |
||||||||||
"Hard drives don’t lie. If there is evidence of misconduct on a company computer, I’ll find it." Terry Lahman Founder, Chief Digital Forensics Analyst eForensicsPro |
![]() |
||||||||||
|
Digital Forensics for Businesses Are you concerned that an employee may be surfing porn, misusing email, or otherwise violating computer use policy on a company computer, laptop or smart phone? Call me. I'll determine exactly what happened, when it happened, and in what sequence it happened, through digital forensics analysis (DFA). What is DFA? Digital forensics analysis is the process of capturing, analyzing and reporting on the contents of a digital device's hard drive, usually for the purpose of identifying evidence and determining how it got on the computer in a civil suit or criminal trial. There are several steps involved:
Step 2: Data preservation. I'll create a forensically sound image of the device's hard drive at the disk or partition level. This ensures that I preserve everything, including all hidden files, system files and unused folder space where crucial evidence may be stored, without changing anything on the hard drive. Step 3: Analysis. I'll use forensic hardware and software to thoroughly examine every part of the hard drive for evidence. This may include examining text files, email, photos, artwork, videos, chat, databases, software and more. I can even determine if files or entire portions of the hard drive have been "wiped" clean using erasure software (often a violation of a company's computer use policy). Step 4: Report. I report my findings in cascading depth. I write the executive summary for laypersons; the findings section for both laypersons and experts; and the technical addenda for other forensic analysts, if and as necessary. By clearly understanding what has occurred, you can decide what to do next. Step 5: Further assistance. If the evidence prompts you to seek legal counsel and pursue a civil suit or criminal trial, I can work with your attorney. (See Digital Forensics for Attorneys) If you have a situation in mind right now, here are two important things to consider:
2. Digital evidence must be preserved properly to ensure its admissibility in court. Do not handle the device. Do not turn it on or off or have anyone, not even IT personnel, copy any files, as these actions may taint whatever evidence may exist on the hard drive. Why choose eForensicsPro? Digital forensics analysis leaves no room for error. Here is why you can place your trust in me.
|
![]() |
|||||||||
© 2012 - 2022 by eForensicsPro. All rights reserved. Site Map | Home | Data Recovery | Data Preservation | Preliminary Analysis and Planning | Password Recovery and Defeats | Secure Data Elimination | Digital Forensics for Businesses | Digital Forensics for Attorneys | DFA Consulting for Businesses | DFA Consulting for Attorneys | What to Look for in a DFA | About Terry Lahman | Mission/Vision/Values | Why Choose eForensicsPro | Privacy Policy | Contact and Email | |