Whenever there is information on a computer that could be relevant to a case in a court of law, Computer Forensics are required when retrieving the data. Evidence must be handled correctly by a professional Digital Forensic Expert using standardized industry protocols. If evidence is mishandled, it is likely that it will be tainted, lost or deemed inadmissible.
Computer Forensics Evidence
Our Forensic Examiners extract the following kinds of data for use as evidence:
- Websites visited & files downloaded
- Time/date of internet access
- Communications via text, e-mail, social media
- Deleted files
Forensic evidence contains both data and meta-data (or data about data). Meta-data reveals more details than data alone such as file creation date, modification date, and author.
Computer Forensics also exposes attempts to tamper with, delete or destroy electronic files. Alterations to digital data leave evidence, like fingerprints, that can be collected and may prove crucial to a case.
Rigorous Standards & Professional Expertise
TCS’ Certified Digital Forensic Examiners use methodology and standards consistent with those of law enforcement agencies such as the FBI and RCMP. We adhere to strict case management protocols, follow chain of custody procedures and verify and cross-verify our findings. The data our Forensic Experts extract from computer systems is admissible at all levels of the Canadian judicial system, in all US jurisdictions and in Australia and the UK.