Forensic Data Recovery

Our Forensic Process

We have streamlined our forensics process to make it similar to how an investigation works. Not every investigation is the same, but there are similarities in the process.

Step 1: Engagement

Before beginning an investigation, we will have a meeting to discuss case objectives and create a detailed work statement.

Step 2: Preservation

No matter how many devices are involved in the case, the next step will be to preserve the evidence and begin a chain of custody through verified copies of evidence. This will help track the movements to and into our lab and save the original data.

Step 3: Investigation

Investigation is where the main work happens. Our experts will retrieve data, analyze it, take notes, and build a credible story with the data.

Step 4: Reporting

When the investigation is complete, we compile everything into a report explaining our findings. They are clear and easy to understand for people with all different levels of knowledge with technology.

Step 5: Testimony

Our experts can testify as a witness in court on the case findings and observations if necessary.

Data Recovery Process

One of our customer service representatives will give you a scenario-based quote and explain how the process works. We also provide a time estimate depending on your chosen service level. We offer many options from low-cost and low-priority to emergency and same-day service.

The first step to data recovery is filling out paperwork electronically or manually. After the job is checked into the system, we send you an email and call you when your media has arrived. The email will contain a username and password so you can check your recovery job’s status throughout the process.

Next, our technicians will diagnose your device. After they have discovered how to recover data from your device, you will receive a quote of the costs and you can either deny or accept the quote.

When you accept the recovery quote, we start the recovery process. After it is completed, we will send you a file listing to verify the recovery. Lastly, we will review and approve the file listing and place the recovered data on another form of media. We will then ship the data back to you or you can choose to pick it up.

Accreditations

Flashback Data has worked for clients around the world since 2004 on sensitive incident investigations and forensic data recovery services. We have worked for corporations, law firms, and foreign governments.

We have a ISO/IEC 17025:2005 laboratory that is accredited by the American Society of Crime Laboratory Directors. We also have several certifications:

• Certificate | ALI-113-T
• Field of Accreditation | Forensic Science Testing
• Discipline | 9.0 Digital and Multimedia Evidence

Our personnel are experts in law, criminal investigation, intelligence, fraud examination, and information systems and security and our forensic examiners are highly credentialed in many fields.

Our Lab

Flashback Data has a secure facility that will protect your media at all times. The lab features four zones equipped with 24/7 monitoring, antistatic flooring, class 100 clean room workstations, flash memory and mobile phone repairs stations, thousands of hard drive replacement parts, and more.

The forensic lab has powerful workstations and fast hardware imaging stations, as well as dozens of terabytes of storage.

To recover data from a device, the environment must be clean since any dust, fingerprints, and dirt can harm the recovery process. Flashback Data performs all recoveries in a safe and clean environment for the best results possible.

For more information on our data recovery services, click here.

Please call us at 866.786.5700 to speak to one of our case managers to see if we can help you in your matter.