Forensic Imaging
Create exact bit-for-bit copies of the data on a computer or other storage medium. Admissible in court and provably identical to the original.
Cell Phone Forensics
Imaging, recovery, and analysis of data from cell phones, tablets, and other mobile devices.
Data Recovery
Extract data from corrupted or damaged devices. Find and restore deleted files and messages.
Expert Evidence Analysis
Identify files, emails, or activity logs that are relevant to the case. Piece together subtle clues to provide a clear story.
Expert Testimony
Testify in court or deposition regarding the conclusions of evidence analysis, validity of data, and soundness of methodologies.
Theft of Trade Secrets
Investigate unauthorized copying, printing, or transfer of sensitive or valuable data.
Digital Forensics
Digital forensics is the science of extracting electronic information, both visible and hidden, from electronic devices. These devices include computers, laptops, phones, tablets, surveillance cameras, servers, and more. With electronic devices being so prevalent in both work and home environments, it’s no surprise that much of today’s evidence is found on them.
The role of digital forensics in investigations is expanding rapidly. Traditional investigative methods, like following a paper trail, are becoming less effective. Digital evidence—including emails, activity logs, correspondence, user documents, internet activity, and other electronic files—has become essential in internal investigations, civil matters, and criminal cases, even when attempts have been made to delete or hide the data.
ArcherHall’s digital forensic services are designed to thoroughly analyze electronic evidence and recover data, even if it has been deleted. Our experts are skilled in identifying and understanding the artifacts and trace evidence found on electronic devices, which can be critical in both court cases and non-litigation related investigations. Rely on ArcherHall for comprehensive digital forensic examination services for any digital device.
Have a question or need to speak to an expert? Contact us today!
ArcherHall as a Neutral Expert
ArcherHall collaborates with top law firms, including international, national, and regional teams, to provide forensic analysis for court proceedings or internal digital evidence investigations. We serve clients on both the plaintiff and defense sides and are active members of various local, regional, national, and specialty bar associations. When courts require a swift and efficient process to uncover relevant facts, ArcherHall is often appointed as a Neutral Expert. We also work extensively with professionals in finance, government, HR, insurance, IT, and law enforcement.
- Data Preservation & Extraction
- Mobile Device Data
- Computer & Server Data
- Social Media Data
- Removable Media & Mass Storage Devices
- DVR & Video Surveillance
- Digital Phone Systems & Voicemail Data
- Archive & Backup Media
- Internet Enable Devices & IoT
The Digital Forensics Process Includes:
- Preservation of Data – ArcherHall acquires and preserves data in a forensically-sound manner from all digital systems and media types (see list below).
- Analysis & Testing – of all types of data including both content & artifacts.
- Reporting
- Testimony
System & Media Types
ArcherHall provides timely and trusted computer forensic examinations of any digital device including:
- Windows
- Macintosh
- Unix | Linux
- Workstations & Laptops
- File Servers
- Email Servers
- Database Servers
- Application Servers
- Cell Phone Forensics
- Mobile Devices & Specialized Services for Mobile Devices
- Digital Surveillance Systems & Video Digital Forensics
- Digital Voicemail & Phone Systems
- Digital Recorders
- Removable Media (CDs, DVDs, USB thumb drives and more)
Methodologies
We have assisted in a variety of computer forensic investigations including:
- Digital Forensics Investigations
- Human Resources Investigations
- Fraud Investigations
- Cyber Investigations
ArcherHall consistently exceeds digital forensic methodology protocols by applying our expertise to every case. Our success comes from our commitment to high standards and extensive experience across various digital investigations. We approach each case as if it will go to trial, ensuring we’re fully prepared for those that do.
Some of the specific methodologies that we embrace:
- U.S. Department of Justice Guidelines on the Searching and Seizure of Electronic Evidence
- International Society of Forensic Computer Examiner’s (ISFCE) Code of Ethics and Professional Responsibility
- ISFCE’s Certified Computer Examiner (CCE) certification requirements
- Guidance Software’s EnCE certification requirements
- National Institute of Standards and Testing (NIST) Computer Forensics Tool Testing (CFTT) project
- Acquisition / Imaging
ArcherHall’s digital forensic services start by identifying relevant electronic data sources, from which we then create forensic clones. These clones, also known as bit-for-bit or byte-for-byte images, mirror images, or exact copies, are precise duplicates of the original data. Our process ensures that the clone is an exact replica of the source drive and includes a method for authenticating the evidence later in the investigation.
