Computer Forensics Image
Forensic Pursuit - The Pursuit of Electronic Evidence
Computer Forensics Image
Computer Forensics Image
 


A Service Guide for Attorneys

Forensic Pursuit  provides expert computer forensic services to businesses, attorneys, and individuals. This guide details our service offerings for attorneys.

Computer Forensics  is the use of specialized techniques for recovery, authentication, and analysis of electronic data when a case involves issues relating to reconstruction of computer usage, examination of residual data, authentication of data by technical analysis or explanation of technical features of data and computer usage.

Computer Forensics is somewhat different than electronic discovery. While typical electronic discovery works only on “logical” data, computer forensics handles electronically stored information (”ESI”) at the “physical” level. This includes deleted data and data from newly reformatted or repartitioned hard drives.

Forensic Pursuit - Computer Forensic Solutions Forensic Pursuit - Computer Forensic Solutions
Forensic Pursuit - Computer Forensic Solutions Forensic Pursuit - Computer Forensic Solutions

FORENSIC PURSUIT INVESTIGATIONS CAN INCLUDE:
• Forensic imaging of electronic media
• Recovery and analysis of computer evidence
• Preservation and storage of evidence
• Examination of work by opposing experts
• Expert testimony at depositions, hearings, and trials
• Preparation of expert reports
• Reconstruction of timelines, authorship, and chain of editing
• Emergency acquisition of data
• Both on-scene and laboratory investigations

WHEN IS THE BEST TIME TO BRING
FORENSIC PURSUIT INTO YOUR CASE?

THE FIRST DAY!

Did You Know…
that the viewing, extraction, or any other type of data access can permanently alter the data itself, possibly impacting admissibility and/or evidentiary value.
While IT people are very good at what they do, they are not trained in proper forensic techniques. This service needs to be performed by certified forensic investigators.

IN OTHER WORDS, YOUR IT GUY CANNOT DO THIS!


FORENSIC PURSUIT REPRESENTS:

• The plaintiff or defense in civil cases
• The prosecution or defense in criminal cases

Forensic Pursuit - Experts Representing Attorneys Forensic Pursuit - Experts Representing Attorneys
Forensic Pursuit - Experts Representing Attorneys Forensic Pursuit - Experts Representing Attorneys

FORENSIC PURSUIT HANDLES THESE TYPES OF CASES:

• Divorce and family law
• Employee theft of trade secrets, customer data, etc.
• Copyright infringement and software piracy
• Internet activity or pornography
• Sexual harassment, threats, or stalking
• Use of business computers for personal work
• Use of business computers for outside ventures
• General workplace misconduct
• Online auction or credit card fraud
• Drug abuse and/or distribution
• Domestic violence
• Theft, robbery, and/or burglary

WHEN DO WANT TO KNOW WHO TO CALL
FOR COMPUTER FORENSIC SERVICES?

BEFORE THE CLIENT ASKS YOU!

Did You Know…
that the very presence of software that cleanses systems means the user may be hiding something?

It’s a good bet that evidence was copied onto removable media before the cleansing occurred.

FORENSIC PURSUIT CAN FIND EVIDENCE
that data was copied to removable media, or do forensic investigations on the removable media itself.

Forensic Pursuit - Extracting Hard Drive Evidence Forensic Pursuit - Extracting Hard Drive Evidence
Forensic Pursuit - Extracting Hard Drive Evidence Forensic Pursuit - Extracting Hard Drive Evidence

Did You Know…
that an accurate history or timeline is of critical importance when evaluating issues of spoliation?

FORENSIC PURSUIT CAN BUILD A TIMELINE
of computer, file, internet, and email usage by accessing the created, modified, last accessed, edit history, and authorship information stored with computer files. These times can be manipulated by computer users, so qualified forensic investigators should be used to extract this valuable information.

Whether spoliation is inadvertent, negligent, or intentional, an accurate, forensically obtained timeline can make the difference in your case.

FORENSIC PURSUIT CAN EXTRACT THE FOLLOWING DATA:
• Deleted and hidden data • Web sites visited
• Email including deleted email • Files transferred
• Data hiding in swap files • Files downloaded
• Data from reformatted or repartitioned hard drives

FORENSIC PURSUIT FOLLOWS STRICT PROCEDURES WITH EVERY INVESTIGATION TO ENSURE FUTURE ADMISSIBILITY OF ANY EVIDENCE:

• All data handled as evidence
• Complete chain of custody enforced
• Complete documentation of all activities
• Only court accepted investigation tools used
• Industry best practices followed every time
• Complete privacy of all our clients ensured


Forensic Pursuit - Maintains Chain of Custody


FORENSIC PURSUIT CAN RECOVER DATA FROM ANY ELECTRONIC MEDIA INCLUDING THE FOLLOWING:
• Hard drives and floppy disks • CD/DVD-ROMs
• Thumb drives/Flash media • Zip disks
• Cell phones/Handhelds/iPods • Servers/Backup tapes

FORENSIC PURSUIT EXTRA SERVICES:

• Secure short and long term storage of media
• Data wipe and sanitation service (U.S. DoD standard)

FORENSIC PURSUIT EMPLOY EXPERIENCED PROFESSIONALS:

• Well-versed in working with attorneys
• Cognizant of differences between consulting and testifying experts
• Maintain absolute confidentiality
• Understand handling of privileged information
• Routinely agree to and abide by protective orders

FORENSIC PURSUIT METHODS:

STRATEGY

• Who are the parties involved?
• What are the issues of concern?
• What specific hardware items are the subject of the investigation?

ACQUISITION

• Data must be acquired using sound forensic methods
• Media must be separated from its host computer prior to forensic imaging
• Digital images are forensically sound bit-for-bit copies
• Images are verified using a unique mathematical value
• Original media protected using write blocking

EXTRACTION

• Extraction performed on a forensic copy of the media
• Extracted data can include:
Deleted, hidden, and password protected data
Email, including deleted email
Data from reformatted or repartitioned hard drives
Data from unallocated and slack space
File created, modified, and last accessed times
Web sites visited and files transferred

ANALYSIS

• Computer forensic analysis is both art and science
• Data must be validated and placed in context

REPORTING

• Detailed forensic reports are produced including:
Systems collected and chain of custody
Forensic parameters and search results
Observations from the forensics engineer
Exhibits on CD-ROM for in-depth supporting data
Reports tailored to comply with any applicable rules of civil procedure
• Expert testimony at depositions, hearings, and trials

Forensic Pursuit - Expert Methods Forensic Pursuit - Expert Methods
Forensic Pursuit - Expert Methods Forensic Pursuit - Expert Methods

All Forensic Pursuit analysts are CHFI certified forensic investigators.

Computer Forensics Certified Investigators

Forensic Pursuit performs its services all across the United States and all over the world. Contact us to discuss how Forensic Pursuit can address your particular needs.

Forensic Pursuit - National and International Service

Forensic Pursuit

1550 Larimer Street, Suite 149
Denver, Colorado 80202

Toll Free: 866-498-3420
Denver Local: 303-495-2082

Email: info@forensicpursuit.com
Web: http://www.forensicpursuit.com


FORENSIC PURSUIT FOR BUSINESS
 Computer Forensics Image
 CONTACT
 Computer Forensics Image

All initial consultations are free of charge.
©Copyright 2006-2009 Forensic Pursuit LLC.  All Rights Reserved
1550 Larimer Street, Suite 149
Denver, Colorado 80202

Toll Free: 866-498-3420  /  Denver Local: 303-495-2082