Forensic Data Capture

The procedures developed by Cyber Forensics to handle evidential material, ensure maximum security is maintained.

In civil cases, forensic copies of the computer hard drive are often produced on site, thus reducing downtime and leaving the original material in the possession of the owner.  We retain the copies for analysis; they are then stored in our own secure facility for the duration of the case.

In criminal cases, arrangements are made with the Police to obtain a forensic copy of the evidence. We retain these securely for the duration of the case.

Occasionally these procedures may be modified according to circumstance, for example, arrangements can be made to copy data covertly in order that a preliminary investigation may be conducted without alerting suspects.  Where there is the possibility that legally privileged information might be involved - a forensic copy can be taken under strictly controlled conditions, and immediately transferred into the safe keeping of a trusted third party, pending a decision on its legal status.  Since the copying process does not reveal the data content, there is no question of breach of privilege at this stage.

The actual data content remains strictly controlled during the life of the case and are only divulged in the confidential report produced at the client's request.