If your opponent’s client uses a computer or if the organization you represent uses computers, you need computer forensics. The computer has invaded our very existence, become a part of our lives, and is an integral part of almost every case from complex litigation and class actions to contract disputes and sexual harassment. GDF has consistently helped law firms substantially reduce costs of electronic discovery, win cases and quantify damages.
Computer forensics differs from data recovery, which is recovery of data after an event affecting the physical data, such as a hard drive crash. Computer forensics goes much further. Computer forensics is a complete computer examination with analysis as the ultimate goal.
Computer forensics also differs from Electronic Discovery (eDiscovery), as artifacts are usually obtained from computer media that is requested during discovery or obtained through a court order or warrant. Computer forensics analysis is the process of finding evidence that is not readily available and preserving that evidence for admissibility and use in court.
This means not only recovering deleted files (documents, graphics, etc.), but also searching the slack and unallocated space on the hard drive—places where a plethora of evidence regularly resides.
It is tracing artifacts—those tidbits of data left behind by the operating system—for clues of what the computer has been used for, and more importantly, knowing how to find the artifacts and evaluating the value of the information.
Forensic exams allow the processing of hidden files—files that are not visible or accessible to the user—that contain past usage information. It is reconstructing and analyzing the date codes for each file—determining when each file was created, last modified, last accessed and when deleted.
Computer forensics is being able to run a string-search for email, when no email client is obvious. An analysis will reveal Internet usage and recover data, even after the computer has been defragged and/or formatted. It is using industry-standard methodology, and supplying you with a concise, clearly written report.
What can GDF do for you?
In large enterprises, a GDF forensics expert can extract data from databases, emails from email servers and reconstruct data and events from electronic evidence.
GDF provides attorneys with a wide variety of computer forensics services, such as electronic discovery, data acquisition, data recovery and evidence gathering. Each client has different needs and each case is unique. We encourage you to contact us if you have questions about how we may assist you.
GDF is experienced in identifying, recovering, and analyzing digital evidence to prove what happened, when it happened, how it happened and who was involved.
GDF is experienced with electronic digital evidence acquisition, search, filter and consolidation of data, emails and files from virtually any type of media, including hard drives, backup tapes, CD-ROM, USB storage devices, smartphones, tablets, Zip disks, and even floppy drives should the need arise.
GDF is highly experienced in determining the optimal balance between legal and technical strategies.
GDF is highly experienced in depositions.
GDF is highly experienced in expert witness testimony.
GDF is highly experienced in the preparation of client witnesses.
GDF offers objective expert testimony that only a third-party certified computer forensic investigator can.
GDF is highly experienced in exposing flaws in opposing counsel's interpretation of electronic evidence and the results of their forensic analysis efforts.
GDF’s highly experienced certified computer forensics investigators are skilled at acquiring and delivering evidence from both hostile and friendly environments.
GDF’s certified investigators employ only proper, accepted and defensible hardware and software to identify, isolate, and preserve electronic information in a court admissible manner. They possess the expertise and experience vital to efficiently analyze electronic information and uncover electronic evidence, while relying upon extensive training and experience to ensure the court admissibility of all electronic evidence involved.