Computer Forensics and Data Collection

Attorneys understand the legal subculture and its specific requirements, which is why their clients trust them. And that is why attorneys hire and trust Digital Current.

Like our clients, we understand that electronic data must be collected in a forensically sound manner. As a result, Digital Current has clearly defined, detailed, thorough and repeatable processes for data collection. It documents the chain of data custody from the very start of the litigation lifecycle.

Though a simple concept, chain of custody can be challenging to uphold. Potential electronic evidence must be accounted for from the moment of discovery until admittance at trial to prove its authenticity. Therefore, it is critical that the chain of custody of potential evidence be documented in order to prevent tampering or alteration.

"Preservation of the chain of custody for electronic evidence ... is key to the integrity of virtually every subsequent step [leading to trial]," says electronic evidence and computer forensics expert Craig Ball. "In some instances, it's the sole leg on which the integrity of the case stands or falls."

Digital Current’s computer forensics examiners and consultants start working with clients very early in case assessment to identify and determine the location of potentially relevant data, be it in laptops, servers, repositories or somewhere else.

Of course, that is easiest if the documents and electronic data have been consistently well managed and archived prior to any notice of litigation. But regardless of the records’ status at the start of the litigation lifestyle, the client will improve its litigation position the earlier that it brings Digital Current into the process.

Once contacted, Digital Current will dispatch computer forensics examiners to the client’s site(s) to assist with the planning, preservation, collection, investigation, analysis, and reporting of electronic stored information (ESI).

Many of the examiners are former and current law enforcement personnel, and are members of the International Association of Computer Investigative Specialists (AICIS) and/or the International Society of Forensic Computer Examiners (ISFCE). In addition, they hold Certified Computer Examiner (CCE) and/or Certified Forensic Computer Examiner (CFCE) certificates.

In other words, they possess the potentially case winning/losing forensic skills, training and experience that even the best corporate IT personnel neither need nor have for their day-to-day network operation demands.

Our examiners also have the time to dedicate to this critical process, unlike pre-existing IT staff members, who are typically fully loaded with pending work orders in most businesses. And our staff has the experience to work efficiently and confidently through the data collection process, unlike IT staff members who will be learning as they go, who will likely make mistakes from inexperience and work comparatively slowly.

Once on site, our examiners will create inter-disciplinary teams that foster collaboration within the organization. They will use the most advanced tools on the market to reproduce forensically sound images of all potentially relevant digital data. The paper files are then scanned and digitized, and pre-existing digital files are electronically copied.

From there, all of those newly-created digital copies are secured and made available for Electronic Discovery and electronic review according to our client’s instructions.

In addition, it is worth noting that Digital Current computer forensics examiners go no deeper into a client’s operations than necessary. That can provide a layer of protection for a client, because if our examiners are called to testify about the data collection, then that will be all that they will know. They will simply not possess any additional potentially damaging information about a client and its operations or procedures.

Click here to learn more about Digital Current’s other Electronic Discovery services, or here for information about our on-line electronic review options.