Computer Forensics & Data Recovery

computer-forensics1

Computer Forensics: “The discovery, analysis, and reconstruction of evidence extracted from and/or contained in a computer, computer system, computer network, computer media or computer peripheral.”

This includes password protected information, tracing the source of e-mail, recovering deleted data, restoring instant messages, remotely monitoring computers and preserving digital evidence for presentation in court, if needed.

Examining a computer to discover exactly what data is stored on it is a time consuming and painstaking process. It is important that it can be proven that the examination had been performed thoroughly. There are various types and amounts of information in a computer that are considered valuable from the evidence point of view. All of these files can be retrieved. These include: Normal files, deleted files, documents, images, password protected information and hidden files.

The most important point to keep in mind is that the original computer is not altered by any of the examination processes. The entire examination must be non-invasive.

Dalman Investigations has the ability, equipment, and the latest technology available to obtain information from desktop computers, laptop/notebook computers, and palm pilots, even if the hard drive has been reformatted.

There will be a mimimum fee for the examination of all computers.

If there is no recovery, there will be no additional charge.

Michigan Law Requiring Computer Forensics Experts to be Licensed.