Frequently Asked Questions
Q: What qualifications should we look for in a computer forensic examiner?
A: There is an increasing number of people hanging out their shingle as
computer forensic examiners. Some are among the most qualified individuals in the country; others are opportunists, lacking
expertise, certification or training, who believe they can make fast money.
Some factors to consider include:
Is the person a former law enforcement, government, or military examiner?
(Note: not just a former member of one of those organizations, but someone that actually did examinations for the organization.)
The best forensic training has historically only been available to these
groups. Examiners in this group have been trained in proper evidence handling and documentation. They are accustomed to operating
at a proof level of beyond a reasonable doubt.
While computer forensics requires the ability to think logically, it also
requires investigative instincts. Examiners that are former law enforcement investigators have honed these skills. An examiner
that does not have an investigative background may think logically, but probably lacks the investigative instincts.
Has the person been accepted in court as an expert in computer forensics?
How many times?
Can they provide references by attorneys as to their testifying abilities?
What were the results of the trial?
Another issue is the forensic processing software used by the examiner.
Some firms are using dated analysis methods that result in their examinations taking significantly more time than ours. We
use state of the art methods and software. Greater examination times mean far greater costs to you.
Q: Your competitors don't give details of their expertise on their websites,
why do you?
A: We believe in being up-front about everything. We know that your time
is valuable and don't want to waste it. Putting credentials and training on the website allows you to decide up-front, without
having to call or email for information.
Q: Why should we choose you to examine our computer?
A: We have years of experience in the recovery of computer data, computer
forensics, and computer related investigations. Our clients include local law enforcement agencies of all sizes, as well as
state and federal agencies and private individuals.
We provide expert testimony in court concerning computer forensic examinations.
If it is important enough to the job, it’s should be important enough
to use the best.
In civil cases, the evidence that we find typically causes the other side
to seek settlement.
Q: We have computer personnel in our company, why shouldn't we let them
conduct the examination?
A: Although a corporation may have an IT department that may have a considerable
amount of knowledge and experience with computers, perhaps even data recovery, it is highly unlikely that they have the knowledge
of the forensic protocols that must be observed to find all of the evidence, protect the data, and ensure the admissibility
of evidence in civil or criminal trials. We take steps to safeguard the computer data; these steps require specialized training,
hardware, and software. We have the training, experience, and tools to conduct a thorough examination of computer data and
are able to interpret what we find.
In addition to the lack of skills, hardware, and software, using a company
employee can open you up to allegations of fabricating evidence and other improprieties.
Can your employee qualify in court as an expert in the forensic examination
of a computer? Probably not. Our expertise has already been recognized by trial attorney’s and courts in Michigan.
If your concerns are strong enough to warrant the examination of a computer,
then it is important to do it right. If an employee is fired or disciplined as a result of the examination, civil litigation
will likely follow. We can provide you with the documentation and expert testimony that are necessary to substantiate your
actions.
Q: We are working with a Private Investigative company. Why can't they
examine computers for us?
A: While there are many tens of thousands of Private Investigators around
the country, the examination of computers is far beyond the skills and training of all but an extreme few. There are many
specialties in Private Investigation; just because an investigator has excellent credentials for conducting financial investigations
does not mean that they are qualified to examine computers. If you are going to pay someone to recover computer evidence,
pay a professional examiner. With our expertise and tools, we can recover evidence that others wouldn't even know to look
for.
Our expertise includes:
2001 - A+ Certified as a computer hardware/software professional
2003 - Licensed in the State of Michigan as a Private Investigator
1974-2002 - Over 28 years of training in the area of investigations by
the Michigan Department of State Police.
There are some unqualified individuals being passed off as
qualified.
Know their credentials before you hire them or provide them
with evidence that could be damaged, lost or destroyed.