Computer forensics is the investigation of computers for evidence including documents, deleted documents, Internet history and system use history.   As the name implies, it is the process to find how a computer was used and to report the facts using forensically sound technique.  Forensic technique is the use of hardware, software and training to perform investigations without changing the original form of the data including metadata. 

Many people don't realize that just turning on a computer will change data that could be important for a case.  The reliance of IT personnel to preserve data or to "snoop" around can and will compromise the evidence.  Keep in mind that if the IT person finds evidence they may be required to testify to their processes in court.  Leaving the investigation to trained professionals will ensure the veracity of the evidence and avoid the no-merit argument in court. 

Credentials are also important in court and the Center for Computer Forensics' examiners have outstanding credentials.  All examiners are CFCE certified with numerous other vendor certifications.  All of our examiners are extensively trained in a number of different forensic tools allowing them to determine the best and fastest approach to a case. 

The Center for Computer Forensics offers a full line of forensic processes for almost any type of media including PCs, macs, servers, cell phones, electonric recorders, voicemail systems, digital cameras, etcetera. Please see our consulting section for more information on how the Center for Computer Forensics can help you manage your next case involving electronically stored information.