Why A Forensic Expert?
Many companies will want to use their own MIS/IT specialists to gather information. Computer forensics can be defined as the employment of a set of predefined procedures to thoroughly examine a computer system using software and tools to extract and preserve evidence. Forensic analysis goes well beyond the simple gathering of information. Even turning on a computer can corrupt evidence. Did you know, for example, that: • Booting up the system may alter time stamps; • Routine system maintenance may alter or destroy data; • Saving new data may overwrite old data; • Installing new software may overwrite data; and • Using virus programs may alter data. Forensic experts can image a computer without ever turning it on; enabling them to testify that the data has not been altered in any way. Forensic experts understand the protocols necessary to make their findings admissible. They can assist in protecting the data and the chain of evidence by following forensic procedures including: • Identif
