Q: What if the data has been deleted?
A: Finding and recovering deleted data is a core element of
computer forensics. We use forensic tools and techniques to dig beyond files and
folders, past the operating system, whether it's Windows or Macintosh, Linux or
Unix. We go past it all, right down to the data in its rawest form.
We can often recover and restore deleted files to
their original state, including data that the user may have
intentionally tried to destroy. Even when we're unable to completely
restore deleted files, we can often find and extract portions of files that
contain useful data. If the user has deliberately destroyed data, we can often
demonstrate that intent, as well.
Q: How long does it take to examine a computer?
A: It varies by the size of any hard drives and other media involved, the
level of work necessary to extract and analyze the evidence, and the amount of
relevant evidence that needs to be included in the report. We do offer a unique
service package called the 777, which guarantees results
within seven days. Most
777 package results are
delivered even sooner.
Copyright 2004, Evidence Technology, LLC, All Rights Reserved
