Precise can perform a byte level, hash verified acquisition of all data and information on a digital device. All information, such as operating system files, deleted data, and metadata, is preserved in its original format. Forensic imaging provides the best possible manner of preserving evidence and minimizes the time disruption to the client in the collection process.
Precise’s analysts can specifically target certain areas of a mobile device, computer, laptop, server, or network to be forensically imaged. Similar to a full forensic image, all metadata and system data may be preserved. This is particularly useful in situations where the data sources are extremely large or where highly sensitive (but non-relevant) data also exists on the device.
Particularly useful when client devices are geographically disbursed, computer forensic tools are securely executed on the remote machine to specifically target digital information or forensically image an entire hard drive. When performing a remote collection, data can be culled and filtered prior to making any forensic data acquisitions.
Precise’s computer forensic software can filter, cull and sort data based on criteria such as filename, filename extension, file header and footer, MD5 or other hash value, type of file, file size, creation date and time, last accessed date and time, deleted date and time, last edited date and time or date the filename was last edited.
Precise can retrieve data from the unallocated (unused) areas of a computer hard drive long after deletion. In some cases, data that has been deleted for years can be retrieved. Some items that may be recoverable include filename, content of the data, images, and metadata. Hard drives that have been formatted can be reconstituted to their original format.
Precise can forensically analyze devices such as personal computers, servers, social networking sites, Internet locations, and smart phones. We can retrieve and interpret information and artifacts from these sources and digital storage mediums and devices providing contextual and practical meaning to the data.
Precise’s forensic analysts have been recognized as experts in both federal and state jurisdictions. They can prepare expert reports, author affidavits, declarations and oral reports. Should the case go to trial, our forensic analysts can provide expert testimony in court or through deposition as well as prepare and deliver quality technical presentations.