Electronic Evidence

Preserving electronic evidence properly is essential to regulatory and litigation matters. DOAR's electronic evidence production is sound and thorough because it combines the sleuthing skills of our data forensics experts with the legal experience and knowledge of seasoned electronic evidence professionals.

Data Authentication from Beginning to End

DOAR understands the importance of preserving the authenticity and integrity of electronic evidence. We integrate chain of custody information throughout the entire evidence authentication process. In cases where privileged information is involved, we will exclude this data while retaining the ability to acquire, authenticate and analyze hard disks, floppy disks, Zip, Jaz, and many other types of rotating magnetic and optical data-storage media.

Data Acquisition That Preserves Original Evidence

DOAR uses a non-invasive forensics methodology that preserves the integrity of the original evidence. First we carefully analyze the target device, such as a desktop computer, laptop, server, PDA, phone messaging system or network storage device. Our team then determines the optimal method for copying the data exactly as it appears in the original storage media, including deleted files, unallocated disk space, file slack and volume partition slack.

Often, the fastest and easiest way to image an internal disk drive is to remove it from its native environment and connect it to one of our computers that has been optimized to support the forensic process. Another method we use is to leave the internal disk drive in the original computer. We then boot-up the computer using a modified version of an operating system which has been "neutered" to prevent it from changing any data on disk drives connected to the computer. Techniques such as these ensure all potential electronic data is acquired while preserving the integrity of the original evidence.

When handling electronic evidence, experience counts. At DOAR, we know how to preserve evidence and present it competently. That's one more reason why you can count on DOAR.