Computer investigation FAQ
Here are a selection of general questions and answers
that are often asked when considering a computer investigation. It's
important to remember that each case is unique and therefore we recommend
that if you have specific questions that you contact us on 0870
140 2525.
How much will an investigation cost?
For an investigation involving a single IDE computer hard drive
and a simple set of comprehensive instructions as to what you want the
Data Clinic to investigate, the cost estimate is usually between £3000
and £5000. For on site operations and/or larger computer networks
and/or specialist equipment the price will be based on competitive hourly
rates.
Is it necessary to comply with all these procedures? They add
to the expense!
If you wish to use the Data Clinic findings in any legal context
whatsoever then the burden of costs in implementing correct procedures
is obligatory.
I want to know what an employee of mine is getting up to on
their computer when I am not in the office. Can we submit their computer
to you to investigate?
You must be aware that your employee has statutory rights and
you must be confident that you and your company have the legal right
to make this request of us before you proceed. If you are confident
of your rights then we will provide an independent and confidential
service.
Can you recover everything including deleted files ?
In most cases the results for our clients are satisfactory.
Deleted files or fragments of deleted files are recovered using correct
procedures and made available as evidence.
We suspect a member of our sales force has been passing on
sensitive commercial information to a competitor using e-mail and other
computer documents, how should we deal with this?
We recommend that a proper and thorough investigation is conducted
immediately. Waiting till the culprit has secured a position with the
competitor will in most cases be too late in the day to have a satisfactory
outcome.
I suspect an employee has been using his computer to download
indecent images from the internet, what can I do?
It is essential to take the computer and other items such as
CD’s and Floppy disks into safe custody in the presence of the
suspect. That the evidence items are produced in their presence. That
a copy of the items is made available to them or their legal representative.
You must also be aware that downloading
indecent images of children is a criminal offence
and that in these circumstances the police must be contacted to attend
the scene.
Surely we can just take a look at the persons computer and
scout around until we find what we are looking for then confront them
with what we have found?
Your actions will almost certainly invalidate the use of the
information held on the computer in any legal proceedings. Investigations
must be carried out in a correct manner. See our page on the recommeded
procedures in handling / seizing potential computer evidence.
Can you investigate information held on mobile phones & PDAs?
Yes.
Can you investigate information held on digital camera memory
cards?
Yes.
Can you investigate recordings held on CCTV equipment?
Yes , there are special considerations contact our Forensic
department.
Can you recover E-mail logs from our central server? Our IT
manager says they are not available.
Data Clinic uses specialist software that can recover “deleted
, deleted” e-mails , the process is slow but it is possible.
How do we involve the Data Clinic in a computer investigation?
You can contact us directly on 0870 140
2525 and speak to a member of the forensics team. For
background, please read our page on our general acquiring
computer evidence / computer investigative procedures
page.
> Back
to main computer
forensics page
The Data Clinic offer computer
investigation for both prosecution and defence.
For further information please call us on 0870 140 2525
|
