The Data Forensic Process

Before an investigation begins, we will meet to discuss the objectives of the case. Based on this meeting, we will put together a detailed statement of work (also called an SOW) showing what will be performed, deliverables, and costs.

Regardless of the number and type of devices involved in the case, the next step is to preserve the evidence and start a chain of custody. We will make verified forensic copies of all relevant evidence and track the copies within our lab to preserve the data exactly as it is on the original devices.

After the data is preserved, we can begin our investigation. This is where the majority of the work is happening. Our experts will analyze the data, take detailed notes, and build a narrative from the data.

Once the investigation is complete, we put together a very detailed and accessible report (the quality of our reports is second-to-none in this industry). While meticulously detailed, we ensure these reports are easy to understand and clear to our customers.

If needed, our experts can testify in court or depositions regarding the findings in your case.

For more information on how we can help your case, contact a case manager at 866.786.5700.