Forensic Investigation of Computers

Forensic evidence has been in existence for many years. There has always been a need for forensic assistance, particularly in criminal law. Indeed, many thousands of convictions have been achieved as a result of forensic investigation, whether this be from DNA evidence, fingerprints, handwriting etc. In fact, as technology has developed and new techniques are perfected the spectrum of forensic investigation has blossomed.

There was once a time, not too long ago in fact, when computers were something for large multinational offices and home computing was something of a luxury. However, in the last few years, developing resources have allowed for massive growth in domestic computing, meaning that over 60% of house holds in the UK have at least one computer in the home and more than 86% UK businesses have not only highly developed networks of computers, but also fast reliable access to the internet. The introduction of broadband access has also led to a significant increase in domestic access.

With all this in mind, it certainly comes as no surprise that computers now play a key role in criminal activity. The types of offences vary immensely from frauds to hacking to paedophilia.

In order for investigation of computers to take place, it is vital that an 'image' or 'photocopy' of the hard drive is taken in order to ensure that the original evidence is not compromised in any way. Indeed, by simply switching on a computer, the evidence contained on the hard drive can be drastically altered.

The methods used in obtaining a safe 'image' of the hard drive involve specialist procedures carried out in a controlled environment with key information noted every step of the way.

Due to the nature of some investigations we are on occasions requested to attend to the computer whilst in situe and covertly obtain an image without the users knowledge in order to secure as much evidence as possible.

Once we are in possession of a forensically safe copy of the hard drive(s) in question, we can then examine the material contained on it using specialist software and equipment.

It is possible for us to:

Once we have the information required, we are able to produce this into a report which can be read without confusion and used for either prosecution or defence purposes.

Our investigators are expertly trained in the leading forensic software packages and are regularly updated in developments from a legal or technological perspective. They are able to put forward their findings in a clear, precise way without the need for jargon and are experienced at giving evidence at Trial.