Disklabs: Computer Forensics, Data Recovery, Data Destruction and Forensic Data Recovery Services

Computer Forensics is a highly specialist area. It should only be undertaken by experts who have a comprehensive understanding of the legal system, ACPO, (Association of Chief Police Officers), Guidelines, Masters Degree, (or equivalent) in Computer Forensics, and full knowledge of Evidence Handling. Ideally, the company you take to undertake your investigation should be ISO9001 compliant and possibly ISO27001 compliant too.

Computer Forensics Investigation

The computer forensics investigator is likely to be either in law enforcement, or alternatively a former law enforcement officer. Investigators in computer forensics are the people who utilise tools and utilities to find data on a digital device, (most commonly a hard disk drive).

The computer forensics investigation is likely to go down the following route:

1. Photographing of the acquisition of the hardware

2. Forensically sound evidence capture

3. Examination of the evidence

4. Production of the Report

5. Checking the Report

The Computer Forensics Investigator is a person who will be inquisitive, logical and thorough in their approach to work. These qualities are imperative in the field of the computer forensics investigation, as without these, there will be errors. This is not accepted within the judicial world. Errors in a computer forensics report will deem the evidence as inadmissible, and therefore be disallowed from the proceedings.