Computer Forensics & Digital Evidence Analysis

Computers and digital storage devices can contain valuable evidence of communications, documents, internet activity, file access, connected devices, user behavior, and other events. CAER provides forensic examination and analysis of computers and digital media using methods designed to preserve the integrity of the evidence.

Contact CAER

Digital Evidence We Examine

A computer examination may involve a variety of stored files and system artifacts, including:

  • Documents, spreadsheets, presentations, and other files
  • Email and locally available email attachments
  • Internet history, searches, and bookmarks
  • Recently accessed files and program usage
  • Connected devices and USB history when available
  • User activity, timestamps, and system artifacts
  • Photos, videos, and other stored media
  • Deleted and hidden data when technically recoverable

How Computer Forensics Can Assist

Computer forensics can help answer questions about how a system was used and what information may be relevant. Depending on the matter, CAER can:

  • Identify relevant files and communications
  • Establish timelines of computer activity
  • Examine evidence of file access, copying, or deletion
  • Analyze internet and application activity
  • Identify connected storage devices and other peripherals when artifacts are available
  • Assist with preservation and analysis of electronically stored information

Our Examination Process

The exact process depends on the device and scope, but a typical examination may include:

  • Define the questions and scope of the examination
  • Preserve or acquire the digital evidence using appropriate forensic methods
  • Analyze relevant files, system artifacts, and user activity
  • Correlate timestamps and activity across available evidence
  • Prepare findings for the client, counsel, or other authorized recipient

Frequently Asked Quest

Discuss Your Matter With a Digital Forensics Expert

Contact CAER Digital Forensics Services to discuss the digital evidence involved in your matter and the examination or analysis that may be appropriate.

Contact CAER

Related Digital Forensics Services