Kingswood

Investigations

• Electronic Data Recovery,
• E-mail Tracing,
• Securing of Electronic Evidence,
• I.T. Litigation Support,
• Due Diligence,
• Security Advice,
• Retrieval of Financial Records and Asset Verification
• Risk and Threat Assessment Management,
• Marshalling of Evidence,
• Forensically Cleaning Storage Devices and Hard Drives (Used by Professionals When Upgrading pc’s and Laptops)

[Top of Page]

Our EFR team advises that “If you believe you have a computer that contains evidence, discontinue its use immediately. If it was left running, leave it on, if not, leave it turned off.”

Attempting to access the computer in any way, may change the data contained in the drive or activate a pre-programmed set of instructions to alter the content of the drive. Continuing to use the computer can also innocently overwrite the evidence making it permanently unavailable.

Computer Forensics

One of the key elements in every data forensics procedure is time. Users may unintentionally or inadvertently overwrite evidence simply by continuing to complete their daily tasks. Kingswood Investigations’ EFR Team will quickly and cost-effectively collects and preserve data or evidence that may have been deleted or become inaccessible through normal computing methods. Kingswood Investigations’ EFR Team can determine if certain information exists and, if so, where it might be located.

The media is ‘imaged’ exactly by the latest digital acquisition process ensuring the integrity of the subject media is intact, and evidence preserved.

Kingswood Investigations’ EFR Team then works only with duplicated copies, ensuring that no contamination of the original data takes place.

Computer Forensic Benefits

Before settling or even approaching a lawsuit, Kingswood Investigations’ EFR Team will assist in the implementation of a legal strategy by combining expertise in data extraction, information processing, and electronic evidence protocols to ensure a strategic advantage for you.

Kingswood Investigations’ EFR Team enables clients to collect, recover, process, and review electronic data regardless of media type and without recreating the native environment.

In both civil and criminal issues, there are times when you know or suspect that there is evidence on a computer hard drive or tape that has been hidden, tampered with, deleted or otherwise damaged, and you need the information.

Whether the cause is a disgruntled employee who "wiped out" his computer before leaving or individuals trying to hide evidence of fraud, sexual harassment or embezzlement, or trying to hide the misappropriation of customer files, proprietary processes or customer lists, the process of recovering the information is similar.

[Top of Page]

In many cases the evidence is still on the hard drive and requires skill and experience in data recovery to identify and retrieve the key data. Kingswood Investigations’ EFR Team will safely enter any system, network or data storage device to recover data and determine whether it has been tampered with, deleted or damaged. Depending upon your needs, experts can search for specific data, phrases, files, numbers or keywords; determine when data was accessed; or verify illegal use of proprietary information.