Computer Forensics - The science of recovery and analysis of digital information.
The term 'Computer Forensics' encompasses any device capable of storing digital data. This includes computers, laptops, enterprise servers, cell phones, tablets, thumb drives, optical storage (CD/DVD/BluRay), cameras, SD cards, etc.
A capable examiner can analyze a device for malware, recover lost or deleted data, determine how and when a device was used, bypass passwords, decrypt password-protected files, report on active and deleted Internet history, recover chats from social media, restore and recover data from formatted or drives that have been re-partitioned and a multitude of other scenarios.
where a forensic examiner comes in. With the proper tools, training and
experience, an examiner can not only locate and recover lost or deleted
data, but also interpret and decipher data that does still exist. The
questions of who, what, where, when and why are answered by the trained
It's absolutely essential that you enlist the
services of trained and certified examiners for your cases. Finding the
data is relatively easy for even the most rudimentary trained
examiner. Where your case will suffer is in the process and
documentation that the inexperienced examiner will provide. Credibility
is what sets a believable examiner apart from one that will confuse and
frustrate a panel of reviewers.
Copyright 1992-2012 D-Tech Services, LLC