Computer Forensics
At Disklabs we use legally tested and proven methods to collect, preserve, analyse and present information found on computer equipment to meet our clients needs. In all cases we will produce a clear and concise report documenting evidence where it is found, enabling it to be used to prove or disprove a case. Our experts work on cases such as:
• Corporate cases of Intellectual Property Theft and Employee computer misuse,
• Attacks on computer systems (external penetration violations)
• Criminal cases of Indecent Images, Murder, Rape, Theft & Fraud.
We undertake work for the Public and Private sectors and our experts work for both prosecution and defence. We welcome LSC funded work. Disklabs experts undertake forensic analysis of computers, laptops, servers, storage devices, MP3 players, digital related media, and memory cards.
What is meant by Computer Forensics?
Computer forensics is the recognised process of identifying, extracting and evaluating evidence from digital media contained on computer hard drives and other such digital storage devices. At Disklabs, digital evidence is investigated by our certified Computer Forensic Experts to ensure that any material of evidentiary value can be effectively isolated and extracted in a forensically sound manner ensuring it will stand up to the scrutiny of a court of law or tribunal.
Computer forensics, in a strict sense, applies specifically to the process of evaluation of computers and data stored on these devices. Disklabs Experts are trained and follow the practices outlined in the United Kingdom Good Practice Guide for Computer Based Electronic Evidence maintained by The Association of Chief Police Officers (ACPO). This document is primarily for the Police and investigative community and serves as the main guide to setting standards for British courts. As such, this sets the levels of expectations that digital evidence must meet as exhibits for consideration by the Judge and Jury.
Three key points from this guide include:
• At no point should any data held on the exhibit be altered by either the defence or the prosecution when being relied upon in a court of
Law.
• Presuming there is potential evidence contained on a computer hard drive or media storage device (exhibit) then at all points it should
be managed in a secure manner with a fully accountable evidential trail to preserve the integrity of the possible evidence.
• Evidence will only stand up to scrutiny if it has been handled in the correct way following ACPO guidelines and must be evaluated by
forensic experts considered competent to do so who have the ability to explaining the relevance and the implications of their findings.
All Disklabs Experts adhere to the ACPO guidelines and are supported by a ISO accredit quality assurance process to ensure that all findings successfully stand up to the scrutiny of both the Courts and Industrial Tribunals.
