E.Discovery

Investigations

Incident Response

Forensic Processing

Regulatory Support

------------------------------

Questions to ask a data forensics company:

What are their daily, weekend and after- hour rates? If they are on retainer why is there a difference?

Be careful of low upfront costs, they usually charge you more per hour.

Ask them if they charge you for machine time, i.e. while a search is being run, etc. We only charge when an analyst is reviewing your data.

Ask the analyst how many forensics cases they have personally worked.

Ask them how many cases similar to yours they have worked.

Also ask how long they have been in the forensics business.

Ask them about their training and certifications. Make sure they exist and are recognized.

 



We work quickly and confidentially to support corporate counsel, outside counsel and audit committees respond to employee complaints, suspicions, etc.

"It would give me pleasure to recommend you to law firms and companies requiring assistance with computer analyses and forensics.  Your ability to explain to non-technical managers and lawyers what you found and how you found it made it possible for us to enlist the support of forces inside and outside the company to thwart efforts to steal from us." 

Joseph Ippolito, Esq., Lucent Technologies, Executive Vice President, Litigation (retired)

Comments from a recent clients:

  • "Your forensic work was critical to our victory."
  • "You were a great witness"
  • "Thanks for being good to work with"

We are happy to provide references.

We also provide our services to numerous Fortune 100 and Fortune 500 companies. Although our list of clients is impressive, and many have offered to provide references on our behalf, we respect our clients’ privacy and do not post their names on a website. We are pleased to provide their references upon request.

Key Benefits

  • Expert Service
  • Extensive Experience
  • Free consultation
  • Timely and Professional
  • UNIX and Windows Processing

We have extensive experience with firewalls, routers and global TCP/IP, based networks. We are experts in all versions of Windows, including, Windows NT, Windows 2000 Professional and Server, XP, etc., along with Unix,
Linux and Solaris.

We also have extensive experience working with corporate attorneys, outside counsel, internal investigative staff, federal, state and local law enforcement. Some our our employees hold U. S. government Top Secret Clearance.

Unlike some of our competitors, our computer forensics consultants are employees. We DO NOT outsource to consultants to process computer evidence. Also, our experts are leaders in the field of computer forensic science.

We teach computer forensics for Intense School and have taught at MIS Institute and several SANS Institute conferences. We teach at SEARCH and the Federal Law Enforcement Training Center.

___________________________________________________________________________________________

Electronic Data Discovery (EDD)

Recent surveys confirm that more than 90 percent of all documents produced since 1999 were created in digital form..

DOCUMENT AND FILE DISCOVERY

The ability to locate and recover previously inaccessible documents and files through computer forensic processes. We assist your pre-trial disclosure of pertinent facts or documents by one or both parties to a civil action or proceedings.

Preservation of Evidence

You can entrust us with your electronic media safe in the knowledge that we will use the highest standards and methodologies to protect and preserve the original media.

We follow a strict carefully developed set of procedures that address security, authenticity and chain-of-custody of the original media. We teach Law Enforcement how to preserve digital data, and our information on this was said to be one of the books strengths (by several reviewers) so our methodology is sound. 

Data Recovery and Analysis

We have conducted forensics around the globe and our data recovery services have been used to help some of the world's largest companies. Our computer forensic experts work side by side with your staff and may access data storage devices using recovery and analysis tools and techniques in an attempt to recover active and deleted data from inaccessible media and deleted files, including email. Our computer forensic experts retrieve data from virtually all storage media and operating systems, including Windows 2000/XP, UNIX, Linux and Solaris.

Analysis of User Activity

We will provide reports on all user activity including, but not limited to, electronic mail, Internet and Intranet files accessed, files created and deleted, and user access times.  We can also provide analysis of corporate server and gateway logs.

Password Protected Files

We use several state of the art tools and techniques to access password protected files and hard drives. We do not rely on just one tool, we use many! This is one of our strengths and we would be happy to discuss this more, just give us a call.

Expert Reporting

Our reports provide a detailed depiction of the breadth and scope of our analysis that can be customized to meet your needs. Once our data analysis is complete, our computer forensic experts will furnish detailed reports about the data collected and produced to support the case. Computer Forensic Services finishes the project by producing the data collected in a readable format. Typically, the data can be provided in a format that you select (electronic, printed or a combination of both). We can also provide the reports so that you can view them with Web browser.

We also will print data to hard copy or import it to an existing litigation support database upon request.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Complete Forensic Investigation Service

If your company requires an investigation staff, but your budget can not afford all the related expenses for salaries, benefits, equipment, training, etc. we can help. Our contracted costs are lower then the cost of an in-house staff.

Our principles have over decades of experience in cyber investigations and forensics in both law enforcement and fortune 50 companies.

Services include, but are not limited to:

  • Two-day planning session.
  • Personalized customer guide
  • 24-hour emergency response.
  • On-site support.
  • Weekly proactive investigative service included, AT NO EXTRA COST, in yearly contract
  • Cyber forensic investigative services.
  • Hostile workplace allegations
  • Theft of trade secrets/intellectual property.
  • Employee Fraud
  • Post mortem, with recommendations.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Incident Response and Forensics

CLIENTS ONLY access to 24x7 phone support and response.  Contact us today before an incident happens.

Incident response service includes developing and refining clients' internal crisis management processes, providing emergency response support, distributing threat and vulnerability advisories, and assistance in cyber crime prevention and/or litigation. In addition, Computer Forensic Services provides consulting services during an incident. Clients receive:

  • Customized Incident triage guide, such as:
  • Two-day planning session.
  • Personalized incident response customer guide, such as:
  • 24-hour incident response.
  • On-site support.
  • Cyber forensic investigative services.
  • Post mortem, with recommendations, on all incidents.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Forensic Processing of Computer Evidence

Law Firms
Specializing in:

We do not conduct Criminal Defense services.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Corporations

Services include, but are not limited to:

Training

  • Expert training on multiple platforms (UNIX, Windows OS).
  • Demonstration of current methods and tools
  • Hands-on and Onsite training available
  • Visit the Training page for more information

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Regulatory Support

We have supported many investigations that are regulatory in nature.  Either proactively or reactively.  We work quickly and confidentially to support corporate counsel, outside counsel and audit committees respond to employee complaints.

Numerous laws now require companies to protect customers confidential data.  Some examples are:

Proactive:

We are used by are customers to image computers of high ranking company officials when they exit the business.

Reactively:

When companies want to investigate allegations of regulatory improprieties we have assisted on several occasions in imaging, analysis and production of material.

Some ways we have supported Auditors, lawyers and Corporate Counsel with Sarbanes-Oxley and others.  For more information on our regulatory support

works quickly and confidentially to support corporate counsel, outside counsel and audit committees respond to employee complaints.

Numerous laws now require companies to protect customers confidential data.  Some examples are:

  • California SB 1386
  • Gramm-Leach-Bliley Act
  • Sarbanes-Oxley Act

 Some ways we have supported Auditors, lawyers and Corporate Counsel with Sarbanes-Oxley and others:

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Regulatory Support

Audit Committees:

 
"Sarbanes-Oxley establishes a number of requirements, authority and responsibility of audit committees.  Audit committees must have the authority to engage independent counsel and other advisors as they determine to be necessary to carry out their duties"
 

We can obviously help in imaging drives (locally or remotely) and searching electronic data at the request of the Audit Committees.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

 Destruction of Audit Records: 
 
"Section 802 makes it a crime to willfully destroy audit records prior to the end of five years from the end of the fiscal period.  The act requires the SEC to promulgate rules relating to the retention of relevant records such as workpapers, documents that form the basis of the audit review, memoranda, correspondence, communications, other documents, and records (including electronic records) which are created, sent, or received in connection with an audit."

Our imaging and storage services can assist in the proactive retention of electronic records.  Our complete forensic processing has assisted in SEC investigations.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

 
Rules Regarding Attorneys:
 
Section 307 requires the SEC to issue rules setting forth minimum standards of professional conduct for attorneys appearing and practicing before the SEC..... These standards are to include a requirement that attorneys report evidence of a material violation of securities law or breach of fiduciary duty or similar violation by a company (or agent) to the chief legal counsel or the CEO and, if that officer does not appropriately respond to the evidence, reporting the evidence to the audit committee or the board as a whole"
 
We support attorneys in finding the facts and support them with searching for hard evidence if they have to report something to the company officers or the board.
 

We can also proactively protect the company by imaging computers and storage of the images for the 5 year retention period.  If someone exits the company call us to image the computer in case it is required at a later date.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Criminalization of Misconduct
 
"The act makes criminal the following misconduct:
The certification by a CEO or CFO of a Company periodic report containing financial statements knowing the certification is not correct
Knowing and willful destruction of any audit workpapers or other documents which are connected with an audit
Destruction, alteration or falsification of records done to impede, obstruct or influence any governmental investigation or the administration of any governmental function or bankruptcy proceeding."
 
"Companies should revisit their compliance procedures, particularly as they relate to financial reporting issues.  The act also imposes on audit committees to establish procedures to address, on a confidential basis, employee complaints regarding questionable accounting practices.  Issuers will want to bolster systems that identify and resolve issues before they are referred to an external source"
 
We work quickly, confidentially to support corporate counsel, outside counsel and audit committees respond to employee complaints.

Contact us for a free consultation on how we can assist in regulatory and other electronic production

Copyright 2004 computer-forensic.com