Computer forensics
NYtech’s computer examinations are carried out, using industry standard tools, in order to extract the maximum amount of evidence, including hidden and deleted data, from each item, whether it’s a desktop, laptop, or all-in-one and whether it has a Windows, Apple, Linux, or any other operating system installed.
What types of files might the examination recover?
The variety of files that might be recovered is large and depends, to an extent, on what software is installed on the device and what the device has been used for. As an example, an examination of a standard computer could be expected to return:
- Audio files
- Documents, such as Microsoft Word and Adobe PDF
- E-mails, including attachments
- Images, including photographs
- Internet browsing history
- Mobile phone backups
- Online chat data, such as Skype
- Spreadsheet data, such as Microsoft Excel
- Video files
Presenting the results of your examination
As with our mobile phone and tablet examinations, the results of our computer examinations can be presented to you in one of two ways; either as a preview, or through our online platform.
Evidence preview
For our evidence preview service, our Digital Forensics’ Analysts sift the data on each computer, removing standard files and leaving you with evidentially valuable, user-generated content for you to view on a menu-driven DVD or USB device; all our previews are encrypted, in order to meet the requirements of GDPR.
This filtered approach reduces investigation overheads through expert sifting of data, allowing investigators to focus on the remaining, pertinent data, without being side-tracked by the huge volume of files that are present on computers by default.
Online NUIX platform
If the evidence preview option isn’t quite right for you, perhaps in cases where there are a large number of computers, or possibly a number of investigators who all need access to computer evidence at the same time, then NYtech’s online NUIX web-review option may be for you.
By using our NUIX online platform, forensic data can be made available for you to view, securely, at any time, through a web-browser. Multiple investigators can work on a case simultaneously, with the system giving access to all the files on each exhibit and allowing searches for keywords and phrases to be carried out; items of note can be “tagged” for later recollection and use as evidence.
Access to our NUIX online platform is provided in an initial four week block, which includes the physical examination and forensic imaging of each computer, and a user guide is provided to get you up and running. Additional access is available in four week blocks, at a fixed cost, whilst on-site training is also available, if required, at extra cost.
Questions?
We’re more than happy to chat if you have any questions; our contact page has all the details.