Computer Forensics Overview

Computer Forensics

Overview: FrontLine can offer varying levels of forensic examinations to meet individual company needs. Therefore, an initial no-cost interview / consultation is mandatory and necessary to define objectives and goals. Following preliminary discussions, a detailed Statement of Work will be provided.

Forensic examination can be performed on most digital devices: Hard Drive, Digital Cameras, Palm Computers, Laptops, Servers, PDA’s, etc.

FrontLine employs court accepted and industry standards approach to all work products in order to preserve the integrity of the “chain of evidence”. Our examiners hold the highest computer forensics’ certifications available including CFCE and ENCE. Only 476 people in the world hold the CFCE certification. FrontLine will only offer you the best.

Level 1 Forensic- Preservation of Data
Preserve the evidence for future analysis by making an exact copy of the original data, accomplished without alteration of the evidence. This is an inexpensive preliminary method to preserve future options and choices while providing a permanent record.

Level 2- Examination and Analysis
Operating from both industry standard and a scientific advanced approach to the acquisition and analysis of the data allows the examiner to find specific files, whether active or deleted, operating system information, trace artifacts, data in slack and unallocated spaces, date/time stamps, file links and more.

Reports/ Analysis
You will receive the findings on CD ROM in an easy-to-use format, managed and navigated by even the novice computer user. Our experience, established procedures, presentation formats and superior expertise will guarantee you the highest level of service and satisfaction.

Service available for “Civil” purposes only

Examples of potential need are:

A prior employee or competing company has used your intellectual property and you want to find the proof on their computer.
An employee alleges sexual harassment by use of the company e-mail and you want to find the e-mails, but they have been deleted.
An employee has been visiting adult pornographic websites in violation of company policy and you need proof before termination, even though the cookies file has been deleted.
Your employee has left after returning the company issued computer, and you want to know what was deleted.