Collection

Collection

The collection of the data is the most important phase of digital forensics.  It must be done in a secure and legal manner or it may not hold up as evidence in a court of law. Our Certified Computer Examiners have been trained to thoroughly document each collection from start to finish using digital photographs, specially designed forms and field notes. Using these methods, a forensically sound image is a ‘bit by bit’ copy of the evidence.  Once what evidence is needed for analysis is determined, a ‘working copy’ of the evidence image is created. All analysis and processing is performed using this working copy to preserve the original, pristine image.