The Computer Forensics Process

Data Identification

At the onslaught, LWG will work with you to develop a comprehensive search and analysis protocol which includes:

• Identification of key personnel within the client organization
• Identification of key individuals within the opposing party or parties
• Conduct an information systems audit to analyze possible locations of data

Full Chain of Custody - From initialization of a new matter, LWG executes and maintains full chain of custody throughout the entirety of your case's life cycle to ensure evidence validity is maintained onsite at your location and any of our forensic labs.

Secure Evidence Storage - LWG houses specially designed data safes within climate controlled secure areas to ensure the integrity of your digital evidence. Our class 125 data safes are designed with double door construction to protect contents from magnetic interference, as well as internal water resistant seals to prevent water damage from fire hoses and sprinklers.

Preservation and Collection of Evidence

Proper preservation can mean the difference between whether a case is won or lost. Spoliation of evidence is a real issue. LWG's Computer Forensic Team can assist with the collection and preservation of evidence pertinent to your case. LWG can establish either onsite, or remote solutions to best fit your needs.

Analysis of Digital Evidence

The analysis of the collected electronic evidence is done in close consultation of the client, to ensure efficient use of time. During the analysis, keyword searches, deleted file recovery, targeted file searches, e-mail retrieval, and Internet history can be captured. Data that is not relevant to the investigation or discovery request is eliminated to streamline review. This is often performed by a search using sophisticated tools that simplify the process. Files and records can be eliminated, and operating system and program files stripped from the original data set, to expedite the review process even further. Searches can be specified by location, date, creator or a myriad of other data elements.

Reporting

The results of the analysis are recorded and conveyed in a detailed written report. Evidentiary findings are recorded and, if required, produced in printed form or electronic media such as CD or DVD. The report also explains the procedures utilized in the collection and analysis process in a way that validates the quality of the evidence.

Expert Witness

In the event that the matter proceeds to litigation, LWG's experts present data in a way that judges and juries can understand. We utilized standardized procedures that are fully documented and quickly referenced to ensure defensibility.