Case review is an extremely important first step in the process of  any professional and complete forensic analysis.  Initially, our senior examiner or one of his designee's will meet with the client to learn the basic synopsis of what the case is all about.  The Center for Computer Forensics' examiners are trained investigators as well as computer forensic examiners.  Many of the examiners are retired from law enforcement.  If the examiner understands the case, the result is a far superior analysis, report and maybe even that smoking gun everyone wants to find.

At the onset, the Center for Computer Forensics will provide our clients with a Terms of Engagement form that we required to be read and signed.  The Terms of Engagement detail hourly rates and basic services that the Center for Computer Forensics provides and a confidentiality statement.  A Center for Computer Forensics intake form will also be given to the client to complete to the best of their ability.  The Intake form is used to gather basic case information and to guide the client meeting and the creation of the statement of work. 

During the initial meeting it is important for the Center for Computer Forensics to learn many other things, such as;

• primary contact person
• IT contact person
• type of media involved and numbers
  
  • servers
  • laptops
  • desktops
  • external media
  • USB drives
  • PDA's
  • cellular phones
  • others
  • backup types and availability
• location of media
  • local vs. out of state
  • one site or multiple sites

Often times the IT contact will be needed to answer the technical questions.

Project Proposal 

Once the Center for Computer Forensics has collected enough information a Statement of Work will be written detailing exactly what the Center for Computer Forensics' understanding of the case is and what  the client should expect from the Center for Computer Forensics.   The statement of work will also include time and cost estimates.   The client will be asked to approve  and sign the statement of work. 

Emergency Data Preservation

The Center for Computer Forensics understands that it might be necessary to preserve data before the paperwork is completed.  While having a signed statement of work is ideal, the Center for Computer Forensics' staff will always work with our clients to meet their needs in the most efficient and time effective manner.