Securing Data
The most important process in the entire examination is to properly secure the data
using known and accepted procedures.
If the data is not properly secured then this can open you up to having all data and
evidence thrown out in a court of law! "Best evidence rule" is followed by
Cyber Agents, Inc at all times.
Proper and accepted procedures are followed so this does not happen to you.
Cyber Agents, Inc. has licensed software and hardware used in computer forensic
examinations.
Acquiring / Imaging and cloning media is the process by which we obtain a bit-by-bit
image of the electronic media that is going to be forensically examined or the media in
question. Sometimes it is necessary to make these images before an agreed upon
search criteria so as to prevent any data from disappearing or being overwritten for good.
Once an agreed upon order is signed by both parties then a specified scope of the
examination can begin. All work is client privileged except for finding that may be client
privileged by the other side. This means that if any data is found that is privileged by the
other side and is their data from the beginning that side will have first viewing of all findings.
The findings are indexed and anything being omitted will have an index number associated.