|
Preservation of Evidence
Preservation of electronic evidence ranges from making exact copies of
individual files to creating a mirror image of an entire hard drive or even
multiple hard drives.
Because electronic evidence is fragile (can be quickly destroyed or
deleted) and fluid (can be modified or changed without detection), it is
important to establish and maintain authenticity of files at the earliest
possible moment a file's integrity comes into question if it is to be used in
legal proceedings.
We provide services to either preserve
electronic evidence or to examine electronic evidence to determine it's
authenticity. Relevance becomes an issue if it can be determined that
evidence being presented as original has been changed, altered, modified or
deleted.
|