

Computer forensic investigators typically focus on 4 areas when investigating a potential incident. There are other areas of attention as well, but the following are the most common. Including illicit and damaging activities that could damage your company's reputation.
Saved Files
These are files that can be viewed on the computer. This is usually a non-intrusive task to obtain these files.Our computer forensics experts have in-depth experience in most computer hardware, peripherals, operating systems and many applications to gather and analyze electronically stored evidence to help you prove your case.
Deleted Files
These files are just that...deleted. They are either in the 'trash' or require special software to 'capture and restore' the files. This is usually a non-intrusive task to obtain these files.
Temporary Files
These files are typically generated from browsing the Internet, working on a document, some types of back-up software as well as certain software installations for example. Identifying these requires specialized software and is an intrusive process.
Meta Data
This information typically is associated with the details of a file or document. Such as, the date the file was created, modified and last accessed. Additional information that could be captured could include the original creator of the file (of course that information depends on the original installation of the application) as well as anyone who has ever accessed the file. Identifying these requires specialized software and may or may not be an intrusive process.
Call 800.364.2064