|
|
|
|
|
|
SOLUTIONS
Forensic Pursuit services Businesses and Attorneys. Click on each for information specific to that line of service.
Forensic Pursuit can extract the following data:
|
|
|
|
Deleted and Hidden Data |
Web Sites Visited |
|
Email Including Deleted Email |
Files Transferred |
|
Data Hiding in Swap Files |
Files Downloaded |
|
Data from Reformatted Hard Drives |
Data from Repartitioned Hard Drives |
Forensic Pursuit can recover data from most electronic media including the following:
|
|
|
|
|
Hard Drives |
CD-ROMs |
Floppy Disks |
|
Zip Disks |
Backup Tapes |
Cell Phones |
|
iPods |
Flash Media |
Thumb Drives |
|
and more... |
Forensic Pursuit performs all of the following as part of their comprehensive computer investigation service:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Forensic Imaging of Electronic Media
|
|
|
To make a "Forensic Image" of digital media is to make an exact, bit for bit copy of the media, including all slack and unallocated space (the empty parts of the hard drive). The significance of this step cannot be underestimated. When an imperfect image is used to gather suspect data, the resulting evidence will be found inadmissible in court.
|
|
|
This is not the same as copying all the files on the hard drive! If you start with an 80 GB hard drive with 20 GB of files on it, the forensic image of your hard drive will be 80 GB.
|
|
|
Your IT Department can not or should not do this!
|
|
o |
Many pieces of evidence have been thrown out of court and cases lost because of the improper collection or imaging of the computer media. It is imperative that the original media be protected against accidental writing during the operation and that the copy process be mathematically verifiable to ensure a perfect copy was made.
|
|
o |
If even one bit of data is different between the original data and the copy, the mathematical check values won’t match.
|
|
|
Forensic Pursuit personnel are trained and certified to make perfect forensic copies of your media.
|
|
|
|
|
|
|
Recovery and Analysis of Digital Evidence
|
|
|
Once a perfect forensic copy of the media exists, it needs to be analyzed to extract all the meaningful digital evidence. In most circumstances, valuable data can be retrieved even if it was deleted, hidden, altered, or the hard drive re-formatted.
|
|
|
Forensic Pursuit can extract and analyze data from slack space, unallocated space, and swap files.
|
|
|
|
|
|
|
Preservation and Storage of Computer Evidence
|
|
|
Original media needs to be treated as evidence, preserved and stored in a safe place.
|
|
|
Forensic Pursuit has facilities for storing your original media in a safe place indefinitely if need be, or until the data stored on the media is no longer needed.
|
|
|
At that time, the media can be forensically cleaned and returned to you or the media can be permanently destroyed.
|
|
|
|
|
|
|
Hard Drive Wipe and Sanitation (Beyond Any Possible Recovery)
|
|
|
Sometimes it's not the desire to extract data from a hard drive, but to ensure that data can NEVER be extracted by ANYBODY using ANY means.
|
|
|
It is often desirable to sell, redistribute, donate or otherwise dispose of computers with hard drives that at one time contained private data such as credit card numbers, bank account numbers, social security numbers, human resources, accounting, or other restricted data.
|
|
|
Forensic Pursuit can permanently sanitize a hard drive to ensure that no data will ever be able to be retrieved using any method of extraction. Our techniques meet the standards laid out by the Department of Defense and the HIPPA data protection acts for permanent data destruction.
|
|
|
A properly cleaned hard drive can then be put back into service, sold, or otherwise disposed of with complete confidence that the data is gone for good!
|
|
|
|
|
|
|
Examination of Computer Forensics Work by Opposing Experts
|
|
|
Any computer forensic analysis that is performed by opposing council in a civil or criminal matter needs to be verified by your side.
|
|
|
|
|
|
|
Permanent Removal of Pornography, Software, Music, etc.
|
|
|
Are you concerned about undesirable files on your hard drive? Forensic Pursuit can permanently eliminate any traces of such files without damaging legitimate data on your hard drive. Your operating system, programs, and any personal data you want to keep will remain intact. But everything bad will be gone forever and can never be recovered.
|
|
|
|
|
