Defensible Process. Repeatable Results.
Because we understand the importance of proper evidence handling procedures, we approach ESI collection, examination and processing with the elevated customer service levels you’ve come to expect from 24 Seven. Our core belief has always been that our customers deserve unsurpassed technology solutions along with the best possible customer service, and we at 24 Seven Discovere are committed to being second to none. In keeping with this commitment, we have created our latest state-of-the-art litigation support service group: Computer Forensic Services.

Forensics Services
Forensic Imaging. Our Certified Computer Examiners will thoroughly document and record the entire scene with digital photographs. Once the documentation is complete, physical collection can take place. Essentially, acquisition is the physical process of forensically imaging a hard drive for transportation off-site. The image is copied to an “evidence” hard drive that is an exact copy of the original media commonly accepted to be a forensically sound and sterile. Since the acquisition process is so invasive, it is important to ensure that the parent machine and hard drive are re-assembled correctly. As part of the final acquisition phase and after the re-assembly of the parent machine, the machine is started to ensure proper operation.

Chain of Custody Creation and Maintenance.
The COC is a vital part of the data certification process. Without a viable COC, even the best data collection process is subject to failure due to lack of proof of traceable ownership. With a sound and detailed COC, the evidence is able to survive trial scrutiny. As part of our investigative services, we will prepare, maintain and certify the COC for all evidence for which we retain ownership.

Deleted Files, Orphaned Files and Folders Recovery.
Part of the forensic analysis of an evidence drive is the recovery of files and folders that have been deleted. These files and folders are not generally visible or recoverable without the aid of specialized forensically-qualified software such as FTK or Encase. As a service to our customers, we can always attempt to recover all deleted, orphaned or missing files and folders