Computer Forensics is a technological, systematic inspection of the computer system and its contents for evidential data or supportive evidence of a incident or other computer use that is being inspected.

Computer forensics requires specialized expertise that goes beyond normal data collection and preservation techniques available to end-users or system support personnel.

"Electronic Evidentiary Recovery", known also as e-discovery, requires the proper tools and knowledge to meet the Court's criteria, whereas Computer Forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence.

Another important thing to consider is computer forensics is "a process to answer questions about digital states and events". This process often involves examination of computer systems to determine whether they are or have been used for criminal, civil or unauthorized activities.

Computer forensics examiners:

1. Identify sources of documentary or other digital data.
2. Preserve the evidence and data.
3. Analyze the evidence and data.
4. Present the findings.

Computer forensics adheres to the standards of evidence that are admissible in a court of law.

Home | About Us | News | Contact Us | Services | Computer Forensics