|
|
 |
Single Computer Acquisition
Required for search:
We usually make two forensic images of your hard drive: one to use as a "working copy" and one to keep secure (or as a backup copy if the first fails). The original hard drive is re-installed in your computer. We need access to the computer for 4 to 6 hours for each hard drive less than 320GB. Larger hard drives take more time. We require at least one telephone interview with client prior to going on site in order to determine system information.
Helpful Information:
It is preferable to turn the computer off and keep it off until we image the hard drive. This way no information will be changed from that point forward. If you have the original invoices for the purchase of the computer, and any upgrade invoices, it will give us a technological history reference in terms of streamlining our data acquisition process. This will result in cost savings to you. You will be required to have at least one member of your management team on site with us during our entire operation.
Results:
All data which can be recovered will be. The data will be analyzed in accordance with the specifics of the engagement. The data and the reports will be ready for your legal team and our Expert Witnesses to use in your case.
Cost: $250.00 per hour. TAT TBD. Incidentals TBD. Specific time and charges will be detailed in the engagement letter.
Return to Field Forensics Preview
|
|
|
