September 2011 - CAALA (Consumer Attorneys Association of Los Angeles), Las Vegas

 

October 2011 - CELA (California Employment Lawyers Association), Monterey

 

February 2012 - CACJ (California Attorneys for Criminal Justice), Monterey

 

March 23, 2012 - ACFLS (Assoc. of Certified Family Law Specialists) Conference, Rancho Mirage, CA  

 

Spring 2012 - NACDL (National Association of Criminal Defense Lawyers) Technology Seminar, Las Vegas

 

 

If your client has a computer, they need computer forensics. They may not know it. They may dismiss the logic. They may decline the service. But they need it, and every examination I do reinforces this truth. Computers are deeply integrated into our lives, and they play an important role in almost every case.

Nearly all of my clients are like you - attorneys who practice in all areas of law. Trial lawyers, civil attorneys, intellectual property, probate, patent, family law, plaintiff or defense - if your client has a computer it will probably play a role in the proceedings.

What is Computer Forensics?

 

Data recovery is the fairly common practice of recovering data after an event that compromises the physical data, such as a hard drive crash. Computer forensics goes much further and accomplishes much more. Computer forensics refers to a complete computer examination and analysis. A computer forensic specialist not only recovers deleted files (documents, graphics, etc.), but also searches the slack and unallocated space on the hard drive - places where a plethora of evidence regularly resides. All computers retain artifacts, which are tidbits of data left behind by the operating system. A skilled computer forensic specialist knows how to find the artifacts and extract the clues that reveal what the computer has been used for, and when, and by whom.

 

A professional forensic exam should include the processing of hidden files that are not visible or accessible to the user, but contain important past usage information such as when each file was created, last modified, last accessed and when deleted. A qualified forensic specialist can run a string-search for e-mail, even when no e-mail client is obvious, and identify Internet usage, recover data, and conduct a full analysis even if the computer has been defragged and/or formatted.

What is it worth?

 

What's it worth? That depends. I use the analogy of a poker game. If it's a small pot, ... Read More

An attorney once told me, "If you need an electrician, don't hire a plumber." Truer words were never spoken. And if you need a forensic computer examiner, don't hire a "local computer guy." Computer forensics is a science, the practice of which requires specialized training, experience, and equipment.

Computer Forensics Explained

The two questions I am most frequently asked have to do with the definition of computer forensics, and how to choose a forensic computer expert. I'll start with the first question.

Computer forensics is a science, a discipline, and an art, all involving the identification, preservation, extraction, documentation, and interpretation of computer data. It is always a discipline that follows industry-standard methodologies and procedures, while allowing flexibility and experimentation with validation.

Computer forensics is not only recovering deleted files (documents, graphics, etc.), but also searching the slack and unallocated space on the hard drive-places where a plethora of evidence regularly resides. Recovering deleted files is the simplest of chores; discovering the significance of those files takes the expertise of an investigator.

It is tracing Windows artifacts - tidbits of data left behind by the operating system - for clues of what the computer has been used for, and more importantly, it is knowing how to find the artifacts and what value the information holds.

Computer forensics is being able to run a string-search for e-mail, when no e-mail client is obvious. A forensic computer examiner will be able to identify Internet usage, recover data, and do a full examination even after the computer has been defragged and/or formatted.

If this is the type of computer examination you need, then you need to ... Read More  

DataChasers® provides the legal community full-service forensic computer and e-Discovery investigations. When you choose DataChasers®, you choose experienced examiners, holding multiple certifications, providing personal attention to the individual needs of your case. We are well-versed in the litigation process and offer experienced litigation support services. Our examiners are recognized expert witnesses and court-appointed neutrals who have taught computer forensics, lectured extensively, and published numerous articles on the subject. ...Read More

Our Mission:

Focus on the client's needs; exceed expectations; do the right thing. This is our reputation. We believe it is the most important thing we offer our clients, followed by our experience, certifications, and background. We help you learn the truth, eliminate surprises and win more cases.