Data Recovery

WHAT IS DATA RECOVERY?

At HD Forensics we are proud to say that if a piece of information exists on a computer, mobile phone or storage device, we will be able to locate it and produce it for inclusion in evidence.

This type of forensic investigation should not be confused with the type of searches the average I.T. employee or computer consultant will conduct. We use the same methods and investigative tools as law enforcement agencies to locate and reconstruct each file or fragment, preserving the integrity associated with that piece of electronic evidence.

We can recover electronic evidence during a computer forensic investigation from the following types of devices:

• Hard Drives
• Back-up Storage Media
• Databases
• E-mail Servers
• Web Servers
• Internet Sites
• Personal Digital Devices (Blackberries and mobile telephones)
• Digital Cameras

Data recovery includes items such as e-mails viewed but not "saved", websites visited, deleted documents, uninstalled software, etc. The great news about this type of data is that unlike a piece of paper which only shows us what we can see, electric data can have information about it's creation, multiple versions of that information, who it was transmitted to, and history of it's use.

With over 90% of the world's business documents being drafted on computers and the relentless use of e-mail, instant messaging and internet business by nearly everyone, much of today's civil litigation evidence can be derived from computers.

REMEMBER!

Deleting a file on a computer only deletes the digital map that tells the computer where to find the file. The file or folder will remain intact even though you can not see it.