Computer Forensics

How does computer forensics work?

In this day and age of computer technology it is imperative that computer forensics is regarded as one of the first options in an investigation.

RISQ is able to provide computer forensic support to clients who will enable them to produce files and information found on a computer, without compromising the integrity of the data. These techniques and protocols are followed to ensure:

•           Time and date stamps relating to critical files are not changed.
•           Information in the ‘free space’ of the disk is not overwritten.        

Examining any electronic data storage media must be done thoroughly, carefully and without changing any information stored on it. Our experts have developed procedures and techniques to do just that, such as:

•           an exact copy of everything on the computer is captured;
•           an audit trail is maintained so that events can be recreated;
•           actions taken at every point of the investigation can be verified;
•           quick identification of information and evidence from the computer is enabled.

It is important to remember that evidence is not only found on PC’s and laptops. Our forensic experts have the ability to uncover digital evidence stored on mobile phones; PDA’s; CCTV systems; and access control systems. If information is stored electronically, our people know what to look for and where to find it.