Computer Forensics is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what actions were executed on a specific computer and who was responsible for those actions.
Integreon’s Electronic Evidence Labs™ (EELabs™) specializes in the recovery of the digital “fingerprints” left by the routine use of computers and other electronic devices. Integreon can even recover and examine previously deleted files, utilizing various versions of software and techniques to ensure that our clients have all the pertinent evidence available to support a thorough investigation.
Personal computers, laptops, servers, PDAs, cell phones and other electronic devices have become increasingly important as sources of evidence in fraud, white-collar crime and other investigations in recent years. In many cases, these devices are the repositories for digital evidence that is essential to the investigation. Communications sent by e-mail or files that are found on a computer can make or break a case.
Integron’s EELabs is one of the world’s largest providers of computer forensics services and has the resources to run multiple large-scale forensic examinations simultaneously. Small cases, large cases, and complex cases all receive rapid and complete service and quality attention.
Our highly skilled engineers possess several years of experience as well as the following certifications: EnCase Certified Examiner (EnCE), Computer Certified Examiner (CCE), and many more.
Computer Discovery Levels
Integreon offers computer examinations tailored to the needs of our clients, based on escalating levels of intensity for each examination. Generally, this escalation is apparent at three examination levels: basic, standard and advanced.
At a basic discovery level, the specified computer hard drive is previewed and the original media is accessed, but not imaged. A significant amount of data may be discovered at this level and an evaluation of potential evidence determined, especially if defined data is known and requested (such as the recovery of a specific file).
The most frequently requested examination, a standard examination, is more extensive and requires that an “exact-copy” of the media be created, which is then used during the examination. This focuses on the recovery of specific data (both deleted and active): text, graphics, date codes and many more. Examination time varies widely, depending primarily on the client’s requirements, applications necessary to extract data, scope of keyword searches, operating system, size of the hard drive and other factors.
Integreon is equipped with multiple lab workstations and has the capability to run several forensic machines simultaneously. This allows us to quickly process data from any case, regardless of size or complexity. The most extensive examination is an advanced examination, which includes a full investigation of trace artifacts, latent evidence, slack and unallocated space, and a comparative analysis of the data, date codes, links, a full-and-complete examination and analysis of the media and related corroborative evidence on a computer. This examination is not strictly dependent on specifics from the client, but is essentially a full and complete investigation. This advanced examination is especially useful when seeking computer evidence that is confirmed from several related areas within the computer. The final results may provide irrefutable evidence that is then used to corroborate or refute specific allegations. For example, date codes may be linked to specific files, which are linked to artifacts, graphics, e-mail or other files.
Cyber Crime Prevention
Integreon helps reduce the risk of cyber crime through implementation of the latest techniques to minimize the risk of computer-based fraud and abuse. Organizations need to defend themselves and investments in security measures against cyber crime has been identified by Gartner Research as one of the key growth area for businesses today.
Responsiveness
Integreon provides an investigation service with a layered approach, allowing our clients to retain fiscal control and direction while maximizing the value of our expert knowledge and experience. Integreon recognizes that evidence based on a computer is extremely volatile and will degrade rapidly. To this end our mission is to respond to your needs immediately.