Page last updated on Tuesday, April 4 2006 at 1537 UK

Evidence Analysis

Searching electronic data and extracting information which can be used as evidence

Analysing computer data is a specialist task which requires specialist tools and a combination of experience and technical skill.

One of the most important considerations is the preservation of evidential integrity: information which might be used in evidence later must not be compromised in any way.

Other challenges must also be met. The sheer volume of information in a computer forensics investigation requires efficient filing and filtering techniques; the wide variety of different file types also means that suitable viewing facilities will be needed.

An investigator needs to understand the way in which different computer file systems function in order to appreciate the subtle effects that a file’s location can have on its value as evidence. Concepts such as a file slack and free space can have significant bearing on the course of an investigation and any analysis must recognise this.

Above all, evidence analysis relies on the ability to search for key information such as names, addresses and bank account numbers. Finding this information quickly and collating it into a coherent format is the way in which computer forensics adds significant value to an investigation.

How We Ensure Compliance

By using a selection of recognised forensic software and hardware, we are able to ensure that the evidence we collect is acceptable within the framework of a criminal or civil action. We use approved search techniques and some of the latest computer forensics technology to analyse large volumes of evidence quickly and in great detail.

One of the most important parts of evidence analysis is the information you provide about your circumstances. This helps us to separate valuable evidence from irrelevant clutter and present the evidence in a format which you can understand and use.

Print page Print this article