IT forensics - Digital forensics analysis

Digital Forensics Analysis

In digital forensics analysis, all digital evidence must be analysed to determine the type of information that is stored on it. We use recognised tools that are accepted by most courts worldwide. In many investigations, numerous other tools are simultaneously used to analyse specific portions of the information. The prime goal of computer forensics analysis is to illustrate the timeline reconstruction of past events with as little distortion or bias as possible. We use a set of customized best practices and proven forensics methodology which we used during investigation to achieve this goal.
Our typical forensic analysis includes:

• manual review of material on the digital media
• review of Windows registry and operating system artifacts (e.g. Cookies folder, History folder, Temporary Internet Files, Windows Event Logs, Print Spooling, etc.) for suspect information
• discovery and cracking of passwords
• file signatures and hash analysis
• keyword searches for topics related to the crime
• extraction of electronic mails and images for review

Forensic analysis encompasses the examining, filtering, interpreting and categorising of all relevant data and evidence. Once the analysis is complete, our findings are converted into comprehensive reports which may be used in litigation and for further investigations.