Computer-based evidence is
very different from paper-based evidence-it has unique characteristics
that make it critical to preserve the computer-based evidence as
quickly as possible; discussions regarding relevance and privilege
can occur once the evidence has been preserved.
JLI therefore offers evidence preservation
and analysis services. Using special backup software, entire "image"
backups are made of computer hard disks and floppy diskettes. These
are then analysed for active files, deleted files and fragments
of long since deleted documents.
JLI's additional analyses include the creation of indexes and/or
concordances of all recovered information permitting on-line searching
of the recovered information.
|