 |
|
Forensic Data Recovery Services Computer Forensics - The scope and application of Computer and other Data Forensics investigations has increased markedly in recent years. With the growth of computing and electronic communications in general, more and more cases, both civil and criminal, will involve the examination of some form of computer data storage. Such cases can range from computer fraud or misuse, to intellectual property theft or CCTV evidence. The task of carrying out such investigations falls to law enforcement agencies and private sector data forensic specialists, both of whom are well versed in analysing and extracting the relevant information. Data Recovery - Alongside the growth in computing and electronic data storage has been the expansion of the field of Data Recovery. Data storage devices are not immune to failure, and where such failures occur they can cause the loss of often critical and highly valuable data. Recovery of data from such instances, especially where devices have suffered electronic, physical or mechanical failures, requires specialist laboratory facilities and highly skilled and experienced personnel. Device Failure - In a growing number of cases, the two disciplines of Forensic Investigations and Data Recovery are meeting head-on in scenarios where computer evidence crucial to an investigation resides on a device that has suffered some form of failure and/or damage that is preventing extraction of the data by the forensic practitioner. Computer Science Labs are in the extremely rare position of being experienced both in Forensic Computing and Data Recovery. Thus where a forensic investigation has stalled due to the inability of the practitioner to extract evidence from a failed data storage device, Computer Science Labs can offer a comprehensive data recovery service that can diagnose the failure, rectify the fault and make the data available, whilst following the strict forensic protocols necessary to prevent any compromise to the evidential value and admissibility of the data. Causes of Failure - Data recovery becomes necessary for a variety of reasons. Data can become logically corrupt, where the device itself has not failed but data has been deleted, formatted or corrupted in other ways. Devices, especially hard disk drives, can suffer magnetic media degradation which prevents the data being read back from the disk by normal means. Devices can suffer electrical or electronic failures, especially where there has been a surge or interruption to the mains supply. Data storage devices employ their own built-in operating systems, known as firmware, which handles all the data storage and retrieval operations totally independent of the host computer’s operating system. This firmware is completely inaccessible to normal users, but can still fail or become corrupted requiring the use of highly specialised equipment and applications to diagnose and rectify the firmware such that the data becomes recoverable. The last and most problematic type of recovery scenario involves physical or mechanical failure of the internal components of the device. To rectify such problems, especially in hard disk drives, requires not only highly a high degree of technical expertise and experience, but also a dedicated cleanroom environment and access to the appropriate tools, equipment and spares supply. Data recovery in forensic cases can stem both from the general failure scenarios experienced by devices, but also from trauma or malicious damage suffered during illegal or criminal activity. CCTV Forensic Investigations - CCTV systems are increasingly employing data storage devices such as hard drives to record video footage and the fact that these are often in continuous operation without the stored video data being reviewed until an incident takes place makes them particularly susceptible to data retrieval problems. In cases of arson or burglary, CCTV forensics data can be as critical as it is difficult to recover. Computer Science Labs - In all such cases, Computer Science Labs can offer a comprehensive data recovery service to anyone in the law enforcement or data forensic communities, that facilitates access to evidential data whilst operating within the full forensic imperative that CPR (Civil Procedure Rules) and ACPO (Association of Chief Police Officers) guidelines dictate. Contact us for more information on 0871 2316800 |
