 
1-888-344-1288  888-344-1288
|
 888-344-1288Computer Investigations (Digital Forensics) It is trite to observe that the development of computer technology has revolutionized information access, collection, retention and disclosure as the power and pervasive use of computers, whether or not linked to the World Wide Web, have increasingly become an integral and essential part of our personal and business lives. In terms of private investigation, computer hardware and software have become both investigative tools as well as sources of information critical to the conduct and successful resolution of investigative enquires as well as civil litigation and criminal prosecution. Historically, before the development of the computer, information related to certain investigations – such as matrimonial matters (cheating, adultery, infidelity) – was often suggested anecdotally, as characterized by the following popular song lyrics: “Lipstick on the collar, gonna tell on you!” Now, as might be expected, matters have changed dramatically (although in some cases, no doubt, lipstick, perfume, notes, receipts and other ‘evidence’ remain telltale factors!) It has been said that increasingly – indeed primarily – the dominant source of information related to matters requiring investigation is the digital information stored in the memory chips and hard drive components of wireless hardware (cellular telephones and text-messaging devices) and computers, whether desktops or laptops. Computer Forensics is the use of computer investigation and analysis techniques to identify, examine, and preserve potential electronic evidence so that it remains admissible in a court of law. Most Information Technology (IT) personnel are not trained in computer forensics and do not possess the necessary equipment or software. Because it is virtually impossible, in the short term, to obliterate digitally stored data without physically destroying (crushing and smelting) a hard drive or other storage media, critical data can often be recovered and mirror-copied to another drive to enable a proper examination and forensic analysis. Disk imaging tools are used to make a bit-stream duplicate or forensically sound copy of an original disk in order to retain data for an extended period. Time is of the essence when it comes to recovering stored data. Deletion of a file does not in any way destroy or damage data in digital clusters, but as more time passes, the computer operating system may sense a cluster is available for use following the deletion of a file and the next time a new file is saved onto the disk, there is a danger that the new file or part of it will be stored in the clusters containing the deleted file, thus gradually altering and – eventually – replacing and erasing potentially valuable digital evidence. Internal Affairs investigators include a Board-Certified Computer Examiner (C.C.E.) and Security Management Specialist (Certified Protection Professional), who is also an Associate Professor of Computer Forensics with affiliations to the International Society of Forensic Computer Examiners, the High Technology Crime Investigation Association, the Association of Certified Fraud Examiners, the American Society of Industrial Security (ASIS) and the Council of Private Investigators – Ontario (CPIO).
EDUCATION AND TRAINING
Internal Affairs also conducts a number of Management and Technical Courses related to Computer Forensic Investigations for Corporate and IT Managers, Internal Security Personnel and Licensed Private Investigators on an ‘ad hoc’ and ‘on demand’ basis. FOR FURTHER INFORMATION OR A CONSULTATION CONCERNING ANY OF OUR SERVICES, EDUCATION OR TRAINING PLEASE CONTACT INTERNAL AFFAIRS AT: info@internalaffairsglobal.ca or forensics@internalaffairsglobal.ca or Telephone Toll Free: 888-711-9994
|
 |
 |
||
