Collections

All digital forensics starts with collecting evidence to examine.

The most critical aspect of collections is ensuring that the data is admissible in a court of law. Who you choose to collect the data for your case will be the foundation that your entire case will reside upon.

Forensic collections are not simply copy and paste. When we acquire data, we collect data from a low level, meaning from the hard drive itself. This allows us to capture as much data as possible in addition to collecting deleted data.

Top 4 reasons electronic data becomes inadmissible in a court of law:

Failed to accurately record chain of custody

Collected with non-courtroom recognized tools and methods

Failure to authenticate the data collected

Unauthorized access to personal information

It’s critical that you have a partner that understands where to find the relevant data.

Data can exist in many different places: phones, servers, cloud, laptops, desktops, and the list goes on.

Complete chain of custody

Document the collection

Identity all the places where relevant data resides

Verify all data collected

Types of Collections:

We offer a variety of collection methods that are convenient for you and your clients.

On-site

Our team of digital forensics experts comes to your location to collect the data. This is the most traditional way to collect data and is still fairly common, however is often being replaced by newer methods such as remote collections. For criminal matters, evidence is best collected from law enforcement locations and not transferred.

PROs:

No transferring equipment, keep critical systems on-line, supervision.

CONs:

Travel fees may apply, potentially disruptive to work flows, can raise questions with employees.

Remote

Most modern day systems allow for the collection of data over the internet. This method of collection is non-intrusive, however can take longer time to complete. Only certain collections can be accomplished successfully remotely, such as email, Apple iOS devices, small data collection.

PROs:

No transferring equipment, can be completed during off hours.

CONs:

Can not be reliably completed on large data sources.

Lab Based

Most clients choose to ship or deliver their equipment to one of our forensic labs for collection. This method is the most cost effective and least intrusive on schedules.

PROs:

No travel fees or expenses, no disruption in work flow, fastest collection timeframe.

CONs:

Custodians are without equipment during collection.

Remote Assisted

Clients that have an IT representative or technical staff prefer to have a remote assisted collection. We provide our specialized collections tools and expert guidance to collect data on-site and have the evidence shipped to our laboratory for examination.

PROs:

No travel fees, equipment stays on site.

CONs:

Labor intensive for on-site technicians.

Timing is crucial.
We deliver quick response times
everywhere in the United States.

47

MINUTES

CURRENT RESPONSE TIME NEAR OUR OFFICE LOCATIONS

24

HOURS

CURRENT RESPONSE TIME ANYWHERE IN THE UNITED STATES