Computer Forensic Examinations
If you are a police force, defence solicitor or company that requires a computer forensic examination then E5h has the skills and expertise to assist.
What do we mean by computer forensics? It is the
and documentation of computer evidence.
This must be done according to approved guidlines. The evidence obtained from computers or computer media is subject to the same rules of evidence as documentary evidence.
All our examinations are conducted according to the principles contained within the ACPO Good Practice Giude for Computer-Based Evidence.
Our investigators have training in the main forensic software packages such as Encase, AccessData Forensic Toolkit and X-Ways Forensics.
E5h Forensics can provide the following forensic services:
Data Preservation Service
Maybe you are unsure if you require a full forensic investigation or you deal with companies that have gone into liquidation and require the data from the computers to be preserved. We can create a forensic copy of the data for you ensuring that the data is available when needed.
If you are faced with potentally a large number of computers that need to be examined then the preview service might be the answer. By conducting keyword searches or examining key files on the computers it may be possible to reduce the numer of computers that require a full forensic examination and as a result reduce the overall cost of the investigation
Full Forensic Investigations
Our investigators can provide a full service from the preservation of the evidential data, through to the analysis and reporting. The investigators have experience in a wide range of criminal investigations, trojan defence cases and HR investigations.