Home Services Free Consultation Company Info

FREQUENTLY ASKED QUESTIONS   

1. "What is Computer Forensics"

Computer forensics is a science, a discipline, and an art, all involving the identification, preservation, extraction, documentation, and interpretation of computer data. At times it is more science than art, another time it is more art than science, but it is always a discipline that follows industry-standard methodologies and procedures, while allowing flexibility and experimentation with validation. If this is the type of computer examination you need, then contract with a forensic computer examiner; after all, most people would not go to a general practitioner for a heart operation!

2. "I'm pretty good with computers... Why can't I do this myself?"

Good question. You probably could.  But to do it well, and be able to validate the information, you need to purchase specific tools and be trained in the accepted procedures. It is not sufficient to merely have the technical skills to locate data on computer media. A strict chain of custody and documentation needs to be established during the information gathering process. For most individuals this cannot be cost justified.  We do offer training programs for those who want to develop in-house investigation services, see Services.

3. "Where does the investigation occur?"

We need access to the client's computer for the duplication process.  This can be done either at the computers' location, our office, or another suitable site.  Once the duplication is completed, we perform the investigation at our office.

4. "Will I lose the use of my computer for the duration of the investigation?"

No.  We will make a duplicate of your hard drive.  Once this procedure is completed we perform our investigation without impacting the client's computer usage.  The only downtime our clients experience is during the duplication process and we can arrange it around their work schedule.

5. "What about personal or confidential information you find during your investigation?"

We provide a confidentiality agreement insuring any discovery we make is kept confidential between us and our client.

6. "Can your investigation be tailored to search for specific information?"

Yes.  We will work with our client to determine what information we are looking for and can search on requested criteria and terms.

7. "Will I lose data on my computer?"

The duplication process is non-invasive and does not change data on the client's computers.  We take the necessary steps to prevent loss of data.

8. "Do you have offices in my area?"

Our home office is in New York with a second office in South Carolina. But, we are willing to travel and depending upon your particular situation, we may be able to do the work remotely from our home office.