Q. When you are aware that a computer may contain evidence pertinent to a crime, divorce, or any legal matter what is the first thing you should do?
A. Turn the computer OFF. Every single thing you do on a computer leaves a trace, but more importantly you can OVERWRITE files that might be very valuable. Contact The Hawkins Firm as soon as possible. We'll make arrangements to get the computer into the hands of trained computer forensics experts. We can often provide you with a cloned copy within 24 hours, thus limiting down time and/or securing evidence without the knowledge of the guilty person.

COMPUTER FORENSICS

The Hawkins Firm Inc., has engaged in a professional alliance with Forensic Strategy Services for all computer related services. The staff at FSS has been in the business of serving companies for more than ten years, including: IBM, Six Flags, LA Fitness, Strafford Publications, Glover Capital, Phillips Hitchner Group and Bellsouth. The foundation of this association is built on superior customer service and experience. FSS offers experience in virtually every area of computer technology and will apply that knowledge to your case.  This will translate into the best data investigative resources available to you. 

We have disassembled and reassembled every type of system including notebooks, computer systems, and electronic data files and formats.  We have special on-site labs for examining and recovering data in a clean and secure environment.   Using proprietary methods, we are able to determine when data was accessed or destroyed and can often recover evidence that was either intentionally or unintentionally lost, changed, damaged or deleted. We will use every method of discovery possible and return to you reporting detail by some of the best computer specialists in the industry.  We can also write custom programs to assemble data in a manner specifically geared to a specific case or any format requested.

We have an in-depth understanding of how computers and related systems work. This includes but is not limited to servers, workstations, all operating systems, WANS, LANS, internet and system integration/development.

Forensic Strategy Services also has a Clean Room and HPE (Hard drive Platter Extraction tool) which allow us to recover data from damaged or corrupt hard drives when others can't.

To learn more about computer forensics, CLICK HERE.

To submit an assignment, CLICK HERE.

For more information on our Computer Forensics services or to have us analyze a computer in your possession, call, email or fill out our contact form.

What happens when a computer is examined?

Typically, within 10 hours of receiving the computer, we have:

• Maintained a documented chain of custody
• Cloned the original hard drive
• Documented the drive contents with forensics processes
• Produced a working copy so the initial copy can be locked in a safe
• Indexed the drive

At this point, we can usually tell you if the basics of what you are looking for exist on the hard drive.

Properly documented computer evidence can provide the "smoking gun" in many cases. 

It is crucial to make sure that the chain of custody is fully documented and that a non-biased third party is involved if there is a possibility of the case going to court.