 |
In forensic recovery, the key element is time. Users may unintentionally overwrite evidence simply by completing their everyday tasks. CBL can quickly and cost-effectively collect and preserve data or evidence that may have been deleted, or inaccessible through normal computing methods.
Using correct protocols and chain of custody pollicies, CBL will be able to collect critical data that will make the difference in forensic investigation.
When the media is received at our facility, CBL ensures three things, security, accountability, and continuity. The media is first logged into our tracking system and a chain of custody document is produced. This document accompanies the media through all steps, and any CBL employee, which handles the media, must sign and date the document.
Protecting Your Media
To protect the data from any further damage, the system must be powered down. The system should not be shutdown using its normal shutdown procedures. Most operating systems, when shutting down, rearrange, clean, and reallocate data across the media. Cutting off power to the system stops this from happening.
If there are noises coming from the media, such as a clicking or knocking sound, power down immediately. Noises from the media, in most cases, reveal physical damage.
For more information on data discovery please contact us so that we can speak to you one on one and determine what process is suitable for your particular situation.
|
 |
