Each forensic analysis or examination is a unique case and impossible to predict how long it will take.  There is not a standard book like auto mechanics use telling the examiner how long each process will take.   The Center for Computer Forensics approaches each case separately and only runs the procedures necessary to facilitate a professional examination.  The larger the volume of data, the longer it takes to collect, load into forensic software, and analyze.  

Keywords, when run against the data are unpredictable.  A hundred matches to a keywords will take much less time the 10,000 matches to review the results and produce relevant documents.  The examiners at the Center for Computer Forensics will work with the client to develop good keywords that produce focused results.  By experience, we know certain keywords are bad.  Example: "terminate" is used in programming language frequently and is often a keyword in employment related cases.  In the case of "terminate" as a keyword, the Center for Computer Forensics would use a Boolean qualifier and run the keyword with another keyword, such as "terminate and employment."

The Center for Computer Forensics will estimate in the Statement of Work  a price range that we believe the processes described in the statement of work will cost.  This is an educated guess based on our prior experiences and the Center for Computer Forensics will notify the client if the estimate increases as the project proceeds.

- Return to FAQ -