Computer Forensics
 Computer Forensics is the close cousin of electronic discovery, and is concerned with the:
- recovery
- authentication; and
- analysis
of electronic data when a legal matter has facts involving:
- reconstruction of computer usage;
- examination of residual and/or deleted data in electronic documents or databases; or
- authentication of electronic documents.
The basic methodology of computer forensics can be described in three steps:
- Acquisition of the evidence without altering or damaging the original.
- Authentication of the acquired evidence to ensure that it is identical to original evidence.
- Analysis of the acquired data without modifying it.
Electronic data can be stored on a wide variety of devices that are owned and used by companies and their employees. For example, discoverable evidence may be found on any of the following devices:
|
Personal Computers
|
Laptops
|
Servers
|
Blackberries
|
|
Cellular Telephones
|
Personal Digital Assistants
|
Thumb (flash) Drives
|
External Hard Drives
|
|
Web-based Email
|
Telephone Answering Machines
|
Tape Recorders
|
Digital Audio Recorders
|
|
Hand-held GPS Devices
|
CD's/DVD's
|
Floppy Disks
|
iPods
|
|
Automobile Electronics
|
Personal Video Recorders
|
Digital Cameras
|
Digital Video Recorders
|
|
Ditigal Audio Recorders
|
Network Routers
|
Network Switches
|
Printers
|
|
Digital Watches
|
DSL Modems
|
Cable Modems
|
3rd Party Devices
|
Mr. Chichester is an attorney and a Certified Computer Forensic Examiner who can gather and analyze the electronic evidence, or advise you on how to deal with the evidence and computer forensic experts.
|
