Frequently Asked Questions about
Computer and Digitial Forensics
Why should I use a Computer Forensic Examiner instead of an IT person?
With storage devices becoming increasingly less expensive and the ability of users to rapidly access documents through electronic means, the filing cabinet of yesterday is changing into the electronic storage era. This change and the requirements set forth in the FRCP now creates a need for companies and law offices to employ the services of a certified computer forensic examiner in order to properly and effectively produce electronic type documents. Historically, many companies and law firms have chosen to use their IT departments in order to produce electronic documents, however, with the rapidly changing computer era, this choice made today could result in an undesirable outcome that not only could ruin an investigation, but potential data could be lost as well due to lack of training and expertise by the IT department. Therefore a lot of individuals are asking what’s the difference?
The best way to describe the difference between an IT department and computer forensics is with an analogy. Computer Forensics is like Digital Archeology. If you want to dig up artifacts and find out the who, what, when, where and why about a civilization, would you hire an Archeologist or would you hire an architect and land developer? I think you would choose an archeologist because the profession uses tools, skills and education in order to recreate what was once there and to date the artifacts. The archeologist can also render opinions (expert witness) about the site in a way that the architect and land developer is not equipped to handle. Therefore, if you have a situation where you need to obtain electronic data that could be used for court proceedings it is wise to hire a computer forensic professional to insure that the evidence obtained is not thrown out of court and rendered useless in a case.
What is the definition of Computer Forensics?
The definition of computer forensics is “to preserve, identify, extract, document and interpret electronic data while following well-defined forensic methodologies and procedures”.
What is the difference between Computer Forensics and Digital Forensics?
In this website the term “Computer Forensics” and “Digital Forensics” are used interchangeably. Actually, “Computer Forensics” refers to the examination of computers whereas the term “Digital Forensics” refers to the examination of any device able to store electronic media. Although our company is called Computer Forensics Worldwide, Inc (CFW) we provide expert and court approved digital forensic examinations and analysis of devices that store electronic type data such as PDA(s), phones, cameras, DVD(s), CD(s) and computers. We also specialize in providing these services on computer networks. All of our reports are comprehensive, easy to understand and have been proven in legal proceedings. Computer Forensics is used in virtually all types of cases to include criminal investigations, criminal and civil defense preparation, complex civil litigation, employment law issues such as terminations for misuse or theft of trade secrets, misuse of company computers and critical data recovery.
Why should I choose Computer Forensics Worldwide, Inc?
At Computer Forensics Worldwide, Inc. we know that there are a lot of so called “experts” in the field of Digital Forensics. This is the result of no all-encompassing certification that the consumer (you) can count on. Electricians have a journeyman program, Medical Doctors have medical boards, and lawyers have the Bar. But what does a Digital Forensic examiner have? Since this is a relatively new field in comparison with the above mentioned we base our expertise on a combination of experience, training and forensic certifications. There are many types of forensic certifications. The best certifications test the examiner’s knowledge through a written test and then examine their ability to conduct a forensic exam with a practical examination. More importantly if you choose to use the evidence in court the “expert” should be vetted and free of potentially court related negative incidents. Because the information found is only as good as the person presenting the evidence. All Computer Forensics Worldwide, Inc. employees have extensive experience and training in the field of digital forensics, completed a certification process and have current or had federal background checks and clearances that are or exceed the Secret level. In addition they all have prepared for trial and testified in federal and state courts as an expert in the field of Digital Forensics. The founder of Computer Forensics Worldwide, Inc currently holds two types of forensic certifications. They are the Computer Forensic Certified Examiner (CFCE) issued by the International Association of Computer Investigative Specialist (IACIS) and EnCase Certified Examiner (EnCE) issued by Guidance Software.