Services
- Computer Forensics
- Document Forensics (Recovery & Analysis)
- Email forensics (Recovery & Analysis)
- Internet Forensics
- Intellectual Property Theft & Data Theft
- Computer Mis-Use
- Fraud Investigations Assistance
- Mobile Phone and PDA Analysis
- Audio Visual Analysis (CCTV)
- Litigation Support
- Live Data Acquisitions
- HR Support and Testimony
- Expert Witness and Testimony
- Phase I
- Phase II
- Phase III
- Phase IV
- Phase V
- Phase VI
- The End Result
Digital Investigations
Electronic Discovery
Phase III - Preservation and Collection
The Preservation and Collection phase is concerned with the acquisition of electronic information (data) marked as potentially relevant in the identification phase. There is an overriding requirement that electronic information should be collected in a manner that is comprehensive, maintains its content integrity and preserves its form.
Preservation and Collection efforts typically follow the methodologies outlined in the ACPO guidelines, whereby all sources of potential evidence (including metadata) are acquired in accordance with leading practice standards, the integrity of evidence is guaranteed, chain-of-custody records maintained, detailed documentation sets (often based on templates) created, and acquired evidence securely stored and transported to the destination of processing.
