Ronald G Cufley BEM FRI MIEE MBCS
Forensic Computer Examiner
  • Specialists in the forensic recovery of data from computer systems.
  • Specialists in the analysis of forensic computer data.
  • Recovery of forensic data from computer backup up tapes and other media.
  • Forensic analysis of Lotus Notes mail systems and other databases.
  • Forensic cleaning of media before disposal.
  • Password recovery


Proof Positive
Why you need us

With the execution of a warrant, an Anton Pillar (Civil Search) Order or the creation of a forensic image there will often be no second chance. There is an absolute necessity to use reliable people who will still be available if the case comes to Court, months or years later. Our associates have been doing this for years.

How we do it

Our service is based on five main headings:

Knowledge – our associates are all well trained in their particular field.

Experience - we all have experience going back many years, most have over 20 years in their field.

Hardware – our laboratory and field equipment is carefully selected and ensures an accurate and timely service

Software – we use a wide range of industry standard and bespoke forensic and analysis software.

Documentation – we provide the highest quality of reports and witness statements; if the documentation is not up to standard all of the items mentioned above are for naught.

Our Facilities

Field Equipment

The field equipment used consists of a number of stand-alone copying devices that may be associated with an IBM laptop fully loaded with forensic imaging and analysis software. This combination allows for both the rapid production of forensic images where time is the over-riding factor and allows for on-site analysis or pre-seizure inspection depending upon the terms of the warrant or seizure order.

Each machine is subject to forensic cleaning and is reloaded from a known good image between each assignment. This avoids any possible claim of evidence spoilage from data left from a previous assignment.

Laboratory

Our Laboratory is equipped with an isolated network of analysis machines and a stand-alone “sheep dip” which is used to ensure that no viruses or other malware enter the analysis network. Each analysis machine is multi-processor and set up with four giga bytes of main memory. As with the field equipment each machine is subject to forensic cleaning and re-loading between assignments. None of the equipment is ever connected to the Internet or other insecure networks. All software is loaded from known good sources and standard disk load is made that is cloned to all the machines. This ensures consistency and security.

Software

We use a combination of industry standard forensic software like Guidance Software’s EnCase, AccessData’s Forensic Tool Kit, X-Ways WinHex and bespoke programs and scripts to perform the more unusual tasks. We also have a full range of more general-purpose tools used for indexing, searching, reporting and file viewing. This is augmented by data recovery programs, virus removal tools and a selection of engineering software.

Standards

All our proceedures meet or exceed the guidelines of the Association of Chief Police Officers (ACPO)

Contact

Email - info@forensic-computer-services.com

Telephone - 020 7193 0832

Mobile - 07941 102 263
Ronald G. Cufley BEM
See my entry
Skype Me™!