Computer Forensics & Electronic Discovery
- Chris L.T. Brown, Computer Evidence Collection and Preservation, 2006Computers Forensics… is the art and science of applying computer science to aid the legal process. Although plenty of science is attributable to computer forensics, most successful investigators possess a nose for investigations and for solving puzzles, which is where the art comes in.
Computer forensics requires specialized expertise and tools to help a qualified expert find, restore, analyze, and recover electronic information that has been lost due to deletion, destruction, or obfuscation. Computer forensics is part science and part art, and should not be confused with mere data restoration or e-discovery.
Expert computer forensics analysis is done with attention to rigorous industry standard practices. It is based on experienced investigative and technical skills and requires close interaction and work with client personnel who are knowledgeable about the type of information being sought. Many times, computer forensics is used in support of complex litigation, and experts must adhere to specific rules of practice that will permit counsel to find and use forensics effectively in aid of a client’s case.
Computer forensics experts identify sources of documentary or other digital evidence, preserve the evidence, analyze the evidence, and present the findings. Computer forensics is more than the technological, systematic inspection of the computer system and its contents for evidence of a civil wrong or a criminal act. Computer forensic findings are a part of the legal strategy of litigation and must be viewed accordingly.
Turiss’ computer forensics experts assist corporate clients, law firms, law enforcement, and government organizations in solving complex problems relating to the processing, handling, analysis, and documentation of computer-based evidential material. Turiss uses court approved methodologies and processes to analyze data contained on a variety of digital media. Our service is ideal for civil litigation, criminal investigations, employee misconduct, or any other incidents where digital evidence may be involved. Increasingly, computer forensic evidence is used to unearth and find the electronic fingerprints of wrong-doers in civil litigation.
Over the years, lawyers have looked increasingly at e-mail for evidence in support of their cases. Recovering deleted e-mail, e-mail fragments, destroyed memos, evidence of improper computer activity, or file transfers has become the new battlefield for civil litigation.
Our computer forensic examiners include former special agents and detectives, all of whom have years of experience supporting and conducting investigations at the local, state, federal, and international level. Our examiners have performed analysis in cases ranging from al-Qaeda terrorists, internet child exploitation, and homicides to white-collar crime, intellectual property theft, and internal corporate fraud. The Turiss team consists of experts whose resumes reflect unparalleled, real world experience working on computer crime. Our team members have a strong history of providing invaluable findings and testimony in civil and criminal courts as expert witnesses.
Electronic Discovery
Electronic discovery (also called E-discovery) refers to any process in which electronic data is sought, located, secured, and searched with the intent of using it as evidence in a legal case. E-discovery is the process of culling through, reducing, and categorizing existing electronic files on a company or personal computer. Because one gigabyte of information equals 22 bankers boxes of information, litigators need a means to parse through the electronic filing cabinet and identify only those documents relevant to the case, saving their clients time and money. Electronic discovery poses new challenges and opportunities for attorneys, their clients, technical advisors, and the courts, as electronic information is collected, reviewed, and produced. Electronic discovery is the subject of amendments to the Federal Rules of Civil Procedure which became effective December 1, 2006.
Examples of the types of data included in e-discovery include e-mail, instant messaging chats, Microsoft Office files, accounting databases, CAD/CAM files, Web sites, and any other electronically-stored information which could be relevant evidence in a lawsuit. Also included in e-discovery is “raw data” which forensic Investigators can review for hidden evidence.
Litigation Support/Consulting
Turiss experts have substantial experience in litigation support at the local, state, and federal levels. Providing consultations on cases, assisting with the preparation of motions for digital evidence, E-discovery issues, and providing expert review of evidence are just some of the services we can provide. Turiss’ President and CEO is a former trial attorney with years of litigation experience and can provide invaluable insight to clients in matters relating to preparation and litigation of cases involving digital evidence.