We require digital forensic services. Now what?

Stop using the device containing the digital evidence immediately. If the device is powered off, then leave it turned off.  If it is on, then leave it on. Remove the device from the Internet by unplugging the network cable if it has one or turning off the wireless antenna. Refrain from any other activity on the device. Contact Deadbolt Forensics® as soon as possible to preserve the digital evidence. Time is of the essence since leaving a computer turned on can gradually destroy evidence as the operating system writes data to disk as part of its normal operation, even if no one is logged in.  This will destroy deleted files which could otherwise be recovered using forensic techniques. If the target device is under the control of opposing counsel, a notification of the duty to preserve electronic evidence should be sent as soon as possible.

2014-12-02T16:15:08+00:00

About the Author: