What is digital forensics?
This is probably the number one question I am asked when I talk about my work. Digital forensics is known as computer forensics, forensic computer science, or a host of other similar names. Like all forensic science fields, it applies scientific principles, techniques, and knowledge to answer questions pertinent to the legal system. In digital forensics, we apply computer science to answer questions related to data, computational devices (including computers, networks, smart devices, cameras, etc), and other sources of digital information. The specific aim of the work varies with the type of case and the questions presented, but it almost always involves Acquisition, Preservation, and Analysis of data.
What services do I offer?
I deal primarily with civil cases rather than criminal, and most of the time my services deal with complex electronic discovery issues. The following is a summary of services I provide.
Data acquisition
- Onsite drive imaging
- Data collection planning / oversight
- Live system extraction from servers (email, file servers, databases, etc)
Digital forensic analysis
- Incident response
- Data recovery
- Event reconstruction
- Reporting
Expert work
- Live testimony
- Affidavits
- Search query design
- Search sufficiency analysis
Software Development / Support
- Custom software for data processing
- Database design
- Search indexes
For more information, please contact me. My contact information can be found under the Contact tab.