Electronic forensics? Computer forensics is now electronic forensics because more incriminating or exculpatory evidence is found on the modern cell phone than computers, except when it includes a business-related investigation. Generally, the modern smart phone is a single user device. It can be tied by time stamp to certain activities and has become the primary electronic evidence depository of our modern communications. The smart phone is not only a communications device it is also a PDA (Personal Data Assistant) containing contact information, text messages and phone call logs. Many are tied to email services and provide clues and probable clause to expand the investigation.
Child Pornography
Most civil cases are serviced by the private electronic forensic specialist. Phones and iPad like device are treated in a forensic manner to properly obtain evidence for court. A warrant or court order is obtained for the device and states the specific boundaries and scope of the data needed. If searching an electronic device and kiddie porn is found the device must be turned over to a police investigator as kiddie porn possession is prohibited by anyone other than law enforcement and for investigative purposes only. The police will then submit for a search warrant to search the device for evidence of child pornography.
Digital Forensic Process Model
Computer and electronic evidence recovery is expensive. Given the multiple terabyte capacities of the modern computers a computer forensic search will cost about $10,000 per hard drive and a phone will set you back a couple of thousand bucks. Not cheap but given the certification process and specialized equipment the electronic forensics investigator will have multiple thousands of dollars in training before certification. If the suit involves multiple millions of dollars, the electronic forensics is cheap. Some forensics processes are destructive of the device. Some phones require the removal of the chip for direct access to the data, destroying the phone.
Collecting, Handling & Storing Digital Evidence
The handling of computer evidence is becoming much more restrictive as the courts and attorneys become more familiar with electronic evidence. Strict handling to prevent tampering, though infrequent, is rigorously scrutinized by the courts. Secure storage meeting forensic standards is demanded. Logs and investigator reports are maintained to prove no impropriety or sloppy handling of evidence or not following proper procedures.
One of the problems is proving access to the device at the time the evidence is generated. Non-personal general access of computers, like those typically encountered in a family setting makes it difficult to pinpoint who was using the machine at the time the digital evidence was created. Cell phones and iPods are more personal devices making it more reliable to prove authorship of evidence.
Mobile & Desktop Computer Operating Systems
The forensics software runs multiple hundreds or thousands of dollars. Different software works with different operation systems (OS) platforms. The three primary OS are Windows, Apple and Linux. There are multiple OS’s for phones and iPad type data devices. The electronic forensics investigator must be familiar with all these systems; however, Windows and Apple are the most prevalent. Forensics must be performed in a secure, particulate free environment. Non-essential personnel are prohibited access to the electronics lab. This prevents the opposing party from bring up tampering and unskilled access to the forensics process. It is good to set up a station for copying data from hard drives. As this is a time intensive task taking multiple hours to create a forensic copy of the data.
Private Investigator, Security & More in Greater Miami, Sunny Isles, Fort Lauderdale, Boca Raton & Miami Gardens Florida
Then there is the actual station to conduct the examination. A cell phone station with the tools to disassemble the phone is needed with the appropriate gear to read chips. The plus of electronic forensic examination is the avalanche of data available and with permission paperwork or court ordered examination of a plethora of data, potential evidence is available. Advanced Private Investigator & Security of Fort Lauderdale Florida can handle all your private investigator and security needs.
