Forensics FAQ

Q: What should I do if I think that computer evidence will be involved in a legal matter?

A: First of all, do not tamper with the potential evidence. In other words, do not turn the computer on at all. This will write data to the hard drive, potentially overwriting evidence in the slack space of the drive. Also, keep a manifest log of who is in the possession of the computer at all times. Never try to search for the evidence yourself. This can possibly get your case thrown out of court.

Q: What if the suspect in my case deleted all of the information off of their computer?

A: Don't worry, we can still recover the deleted information and use it in your case. We use specialized, court-approved tools to recover and search all of the information on the drive, including the deleted information.

Q: But the hard drive in question is physically damaged and a forensic company has already said there is nothing I can do?

A: Flashback Data can still get the data back and image it for a forensic investigation. We are an experienced data recovery company as well. We have performed thousands of successful data recoveries and we have the technology to recover data in any situation.

Q: How do I know you are qualified to perform the investigation on my hard drive?

A: Please see our qualifications on the qualifications page. We are one of the few state licensed investigation companies that perform computer forensic investigations. In many states it is actually illegal to perform any type of investigation without a license.

Q: I have a backup tape. Can you do an investigation on this?

A: Yes!! We can do investigations on any media type that can store digital data.

Q: What is the best way to send my media to you?

A: Follow the steps on our Hard Drive Shipping Instruction page to ensure that your media makes a safe arrival at our lab.