Electronic Discovery

Computers and other electronic devices play a big part in every day life. As such, these devices hold information that can be integral to building a case. Electronic Discovery is a major part of computer forensics.

Electronic discovery (also called e-discovery or ediscovery) refers to any process in which electronic data is sought, located, secured, and searched with the intent of using it as evidence in a civil or criminal legal case.

In the process of electronic discovery, data of all types can serve as evidence. This can include text, images, calendar files, databases, spreadsheets, audio files, animation, Web sites, and computer programs. Electronic mail (e-mail) can be an especially valuable source of evidence in civil or criminal litigation, because people are often less careful in these exchanges than in hard copy correspondence such as written memos and postal letters.

Electronic Discovery is carried out on a forensically sound exact copy of original media (computer hard drive, mobile phone, USB drive etc). The most critical initial step is securing an exact copy of the media as this essentially freezes the electronic 'crime scene'. A copy of the copied media is then used in the investigation for associated evidence and a report is produced (normally with extracts from the electronic data). We prepare reports compliant with the Code Of Conduct in accordance with the Evidence Ac t (1995).

We use professional and proven forensic software and hardware to aid with the above processes. Where needed, we can also develop our own programs which can be used to automate high volume electronic comparison processes and the like.