|
Ronald G Cufley BEM FRI MIEE MBCS Forensic Computer Examiner
|
![]() Proof Positive |
|---|
|
Why you need us With the execution of a warrant, an Anton Pillar (Civil Search) Order or the creation of a forensic image there will often be no second chance. There is an absolute necessity to use reliable people who will still be available if the case comes to Court, months or years later. Our associates have been doing this for years. How we do it Our service is based on five main headings: Knowledge – our associates are all well trained in their particular field. Experience - we all have experience going back many years, most have over 20 years in their field. Hardware – our laboratory and field equipment is carefully selected and ensures an accurate and timely service Software – we use a wide range of industry standard and bespoke forensic and analysis software. Documentation – we provide the highest quality of reports and witness statements; if the documentation is not up to standard all of the items mentioned above are for naught. Our Facilities Field Equipment The field equipment used consists of a number of stand-alone copying devices that may be associated with an IBM laptop fully loaded with forensic imaging and analysis software. This combination allows for both the rapid production of forensic images where time is the over-riding factor and allows for on-site analysis or pre-seizure inspection depending upon the terms of the warrant or seizure order. |
Each machine is subject to forensic cleaning and is reloaded from a known good image between each assignment. This avoids any possible claim of evidence spoilage from data left from a previous assignment. Laboratory Our Laboratory is equipped with an isolated network of analysis machines and a stand-alone “sheep dip” which is used to ensure that no viruses or other malware enter the analysis network. Each analysis machine is multi-processor and set up with four giga bytes of main memory. As with the field equipment each machine is subject to forensic cleaning and re-loading between assignments. None of the equipment is ever connected to the Internet or other insecure networks. All software is loaded from known good sources and standard disk load is made that is cloned to all the machines. This ensures consistency and security. Software We use a combination of industry standard forensic software like Guidance Software’s EnCase, AccessData’s Forensic Tool Kit, X-Ways WinHex and bespoke programs and scripts to perform the more unusual tasks. We also have a full range of more general-purpose tools used for indexing, searching, reporting and file viewing. This is augmented by data recovery programs, virus removal tools and a selection of engineering software. Standards All our proceedures meet or exceed the guidelines of the Association of Chief Police Officers (ACPO) Contact Email - info@forensic-computer-services.com Telephone - 020 7193 0832 Mobile - 07941 102 263 |