Computer Forensics

Computer forensics is the process of recovering, preserving and analyzing data in order to acquire court-admissible digital evidence from computer storage media such as:

• Computer Hard Drives
• External Storage Devices (CDs, DVDs, USB Drives, Card Media, External Hard Drives, etc.)
• Mobiles (Blackberry, iPhone, Smartphones, etc.)
• Digital Cameras
• MP3 Players
• Game Consoles (PS3, PSP, Xbox, etc.)
• GPS Devices (Garmin, Magellan, TomTom, etc.)

Evidence can often be recovered from such devices despite deliberate attempts to hide, delete or otherwise alter it. TCS Forensics' certified forensic examiners adhere to strict operating procedures to maintain a proper chain of custody. We use court-validated tools such as AccessData's FTK and Guidance Software's EnCase Forensic to authenticate and verify our findings. Computer evidence produced by TCS' forensic examiners in our computer forensics lab is admissible at all levels of the Canadian courts and many American jurisdictions (subject to state licensing requirements). Our examiners have experience on the stand and are qualified to give detailed expert testimony concerning all aspects of forensic methodology, the interpretation of digital artifacts and the nature of digital evidence.

Our forensic professionals provide onsite service anywhere, 24/7, 365 days a year to preserve potential evidence before it is accidentally or purposefully overwritten and destroyed. Since 2003, TCS has grown to become the largest independent forensics lab in Western Canada by providing forensic services for law firms of all sizes, banks, business and government in Vancouver, Calgary, Edmonton, Saskatoon, Regina and Winnipeg.