Protection of evidence is critical

A knowledgeable computer forensics professional will ensure that a subject computer system is carefully handled to ensure that:

*    no possible evidence is damaged, destroyed, or otherwise compromised by the procedures used to investigate the computer.
*    no possible computer virus is introduced to a subject computer during the analysis process.
*    extracted and possibly relevant evidence is properly handled and protected from later mechanical or electromagnetic damage.
*    a continuing chain of custody is established and maintained.
*   business operations are affected for a limited amount of time, if at all.
any client-attorney information that is inadvertently acquired during a forensic exploration is ethically and legally respected and not divulged.

Learn More about Forensic data acquisition tips

Leave a Reply

You must be logged in to post a comment.