Digital Forensics
Integreon’s Electronic Evidence Labs routinely handles very large and complex data collection and preservation projects and has a reputation for expertise, forensically sound methods, defensible chain of custody, and customizable solutions. Our efficient approach to data collection and preservation harvests only relevant information in order to narrow the data universe prior to e-discovery processing and review, which can substantially reduce the risk and cost associated with e-discovery.
We specialize in the recovery of digital artifacts left by the routine use of computing systems and other electronic devices. In addition to tape restoration, our experts can recover and examine previously deleted files or establish event time lines - with court-approved defensible processes - to ensure you have all the pertinent evidence to support a thorough investigation. Our forensic experts employ First Line Analysis™ technology for analyzing electronically stored information (ESI) in order to provide immediate visibility into critical facts for assistance in determining case strategy decisions, such as motions for summary judgment.
Integreon’s digital forensics services include:
- Mobile Device Forensics – In addition to traditional digital forensics services, Integreon’s experts can extract and work with data from 90% of cellular devices in use today. These devices include mobile phones, Global Positioning System (“GPS”) devices, and Personal Data Assistants (“PDA”). Our suite of tools has a proven track record in capturing both logical and physical collections from mobile devices. The information we capture may reveal SMS text messages, positioning information, email messages, images, and calendar information.
- Cloud Based Forensics – Integreon’s forensic experts have developed applications and processes to capture information, in a forensically sound manner, from social media services such as Facebook and Twitter. In addition to social media services, we can capture data from online data repositories that include Google Docs, email providers, and document storage sites such as Dropbox. Integreon can preserve the contents of these services in a fashion that will allow keyword searching, rendering of the page as it was displayed at the time of capture, load file creation for review, and forensic analysis of the underlying metadata associated with specific messages or an account.
- Website Capture – Integreon has developed applications and processes to forensically capture websites. These captures allow for forensic analysis of the website, including keyword search, domain analysis, rendering of pages in original format, and load file creation for review.
- Global data collection – We work with clients to ensure that their onsite or remote data collection and preservation methods use best practices and preserve chain of custody during discovery. In addition to our onsite and lab-based collection services, our proprietary Seek & Collect™ technology offers a cost-effective method for collecting data across geographically-dispersed locations.
- Digital forensic analysis – Our forensics laboratory is one of the largest providers of forensics services. We have the resources to run multiple large-scale forensic examinations simultaneously. Our forensic consultants are certified as EnCase Certified Examiners (EnCE) and Certified Computer Examiners (CCE) and specialize in internal investigations, intellectual property disputes, white collar crimes, and employment litigation.
- Password recovery – Our forensic consultants have developed password discovery methods that help forensic investigators as well as law enforcement agencies. With our extensive library of software, techniques, and cracking resources, we can retrieve and unlock virtually any Microsoft, Corel, Lotus, or Adobe document. Our recovery service includes the ability to run simultaneous password attempts to significantly increase the speed at which we can recover passwords.
- Incident response teams – We are ready to assist you 24 hours a day, 365 days a year. We maintain highly trained, on-call incident response teams (IRTs) who are ready to be deployed on short notice with the right equipment to assist in data recovery, collection, data analysis, and advanced computer forensics.
- Secure data storage and archiving – Litigation can spin off into unpredictable directions with surprising requests for information. Integreon can help you prepare for the unexpected by archiving electronic data. These archives enable you to respond more quickly to unforeseen discovery requests. Our services include drive image archiving, Exchange database archiving, and tape storage.
- Data Destruction – Integreon can provide secure DoD grade destruction of magnetic media, including thumb drives, hard drives, tapes, and solid-state devices. This service includes documentation about the destruction process for client records.
- Expert witness services – Integreon can provide expert witness services, including certifying and testifying about discovery methodologies used by both sides, offering opinions regarding the policies and procedures followed during a case, and reporting to the court as a fact witness regarding our findings.