Computing & Digital Evidence
Digital evidence is recovered from a wide range of devices including laptops, PDAs, satellite navigation devices and memory cards from digital cameras and mobile telephones.
Our forensic computing experts use specialist techniques to safely examine digital storage media and devices without corrupting or distorting the original evidence. This can provide a wealth of information which may determine whether the digital evidence demonstrates illegal or unauthorised activities or innocent usage. In many cases it is possible to retrieve data that has apparently been deleted from a computer or has been downloaded and stored without the user’s knowledge.
We can prepare reports on seized material and confirm whether the correct procedures were followed in order to ensure the continuity of evidence.
In indecent imagery cases we can categorise imagery within the court guidelines. We can examine the file structures of stored images and determine how the material may have originated. We are also able to assess if the presence of illegal materials may be due to a virus or Trojan infection or simply accidental download.
We are able to examine computers where wiper software has been used to remove information. This includes determining what evidence is recoverable and examining and reconstructing any remaining fragments.
Forensic computing experts can also investigate cases involving counterfeit CDs and DVDs. We can test the evidence media to check for copyright material or other alleged illegality. We can also examine the equipment and software allegedly being used to produce illegal media to test its capability.
We also have expertise in Internet usage cases involving social networking (e.g. facebook, twitter, MySpace, LinkedIn etc) and instant messaging (e.g. MSN/Windows Live Messenger, Yahoo, AOL), email, Internet history, Internet searches, access to web sites and file sharing programs (e.g. BitTorrent, Kazaa, LimeWire).
