Computer Forensic Procedures
In concrete cases and in accordance with all legal guidelines, Ibas is able to retrieve and gather electronic evidence, reduce the amount of overall data to an appropriate amount for the task assigned and then perform electronic analyses of the data. The documentation from Ibas is limited to the scope of the assignment and may serve as an integral part of the overall investigative activities. If the case is part of a legal proceeding, Ibas can assist the parties in connection with trial preparations and may also be called as an expert witness.
Securing electronic evidence
Evidence in the form of stored electronic data is dynamic and
may be destroyed if the storage medium is used to any extent.
It is therefore critical to react quickly to the customer's
needs at the right time and in the right manner. Securing
electronic data stored on a computer storage device means that
a mirror image of the contents of the storage medium must be
made as quickly as possible. This step may be done either at
Ibas' laboratory or at site in the customer's premises.
Analysing electronic evidence
Usually it is first necessary to obtain an overview of the
contents of the storage medium, and whether there is any
relevant information. Such an initial analysis means that an
experienced computer researcher must conduct a search on the
storage medium for relevant information and then report any
findings in writing. An investigative plan with suggestions on
measures to be implemented and associated costs is also
prepared at the same time. The results of the analysis process
and an investigative plan are normally supplied as part of the
securing stage.
Investigation
The investigative stage aims at finding and documenting any
relevant electronic evidence. An experienced computer
researcher will then conduct a search and a review, using
specialised tools to recover lost e-mail, documents, encrypted
information and anything else that may be relevant to the case
at hand. The investigation is conducted in accordance with the
agree-to investigative plan and budget. After the study is
completed, the customer always receives a report prepared in a
legal standard format, as well as an electronic version of any
relevant information that was found on the storage device.
Various service levels
Ibas offers computer investigation on two service levels:
Standard and Express. The specified prices apply for the
standard service level, and include delivery of an Analysis
Report within two workdays of receiving the assignment. The
Express Service Level provides the report within 7 work
hours.
