Forensic - Recovery Services
Law enforcement agencies as well as legal and corporate investigators rely on Denver Recovery Services when they need data recovery in the course of a forensic investigation. Denver Data Recovery Services has worked closely with numerous law firms, professional investigators and police agencies to recover highly sensitive information in order to identify and track criminal violations and legal injustices.
Denver Data Recovery Services specializes in data accessibility while providing chain-of-custody support. We also offer forensic support services such as the recovery of data when it was accidentally or intentionally damaged or deleted, managing large volumes of data including cataloguing and making data on old technology accessible. Recovered data is always prepared for the needs of the Forensics expert.
Our Service Commitment to You
- No data, no charge.
You only pay for your recovery when we have successfully recovered the data that you need.
- Data Quality Commitment.
- If an accepted recovery is not as promised, Denver Data Recovery Services will attempt to rectify the recovery or refund all or part of the recovery fees paid.
100% secure and confidential.
1. What is Computer Forensics?
There a number of slightly varying definitions around. However, generally, computer forensics is considered to be the use of analytical and investigative techniques to identify, collect, examine and preserve evidence/information which is magnetically stored or encoded.
2. What is the objective of this?
Usually to provide digital evidence of a specific or general activity.
3. To what ends?
A forensic investigation can be initiated for a variety of reasons. The most high profile are usually with respect to criminal investigation, or civil litigation, but digital forensic techniques can be of value in a wide variety of situations, including perhaps, simply re-tracking steps taken when data has been lost.
4. What are the common scenarios?
Wide and varied! Examples include:
- Employee internet abuse (common, but decreasing)
- Unauthorized disclosure of corporate information and data (accidental and intentional)
- Industrial espionage
- Damage assessment (following an incident)
- Criminal fraud and deception cases
- More general criminal cases (many criminals simply store information on computers, intentionally or unwittingly)
- and countless others!
5. How is a computer forensic investigation approached?
It's a detailed science. However, very broadly, the main phases are sometimes considered to be: secure the subject system (from tampering during the operation); take a copy of hard drive (if applicable); identify and recovery all files (including those deleted); access/copy hidden, protected and temporary files; study 'special' areas on the drive (eg: residue from previously deleted files); investigate data/settings from installed applications/programs; assess the system as a whole, including its structure; consider general factors relating to the users activity; create detailed report. Throughout the investigation, it is important to stress that a full audit log of your activities should be maintained.
6. Is there anything that should NOT be done during an investigation?
Definitely. However, these tend to be related to the nature of the computer system being investigated. Typically though, it is important to avoid changing date/time stamps (of files for example) or changing data itself. The same applies to the overwriting of unallocated space (which can happen on re-boot for example). |
