Evidence garnered from computer storage devices can be as critical to the successful prosecution of a case as any other physical evidence. With the expanding "white collar" criminal activity dependent on computer technology, MVU Technologies' forensic expertise assists our clients in gathering evidence that may otherwise be overlooked, undiscovered or contaminated. 

Data Forensics and Computer Evidence Collection Process

One of the key elements in every data forensics procedure is time. Users may unintentionally or inadvertently overwrite evidence simply by continuing to complete their daily tasks. MVU Technologies will quickly and cost-effectively collect and preserve data or evidence that may have been deleted or become inaccessible through normal computing methods.

Once the evidence is received a bit by bit mirror image is created and the original evidence is assigned a unique ID sealed and locked, we keep working with the digital images without disturbing the original media an jeopardizing the whole case.  Also we keep logs of any activity involving the evidence.

We collect data in a forensically sound image that ensures the electronic evidence is preserved and unaltered and this process is fully documented. This process allows the evidence to be admissible in a court of law.  

MVU Technologies leverages its expertise and years of experience to perform examinations, data recovery, expert testimony, and training of any agencies, companies or individuals.

What information can be obtained

• Recovery of deleted computer files
• Data recovery even after a hard drive has been reformatted or repartitioned
• In many cases encrypted files can be decrypted
• Determination of web sites that have been visited
• Determination of what files have been downloaded
• Determination of when files were last accessed
• Determination of when files were deleted
• Discovery of attempts to conceal or destroy evidence
• Discovery of attempts to fabricate evidence
• Discovery of hidden text that was removed from the final printed version of a document
• Discovery of faxes sent or received on a computer
• Discovery of email messages and attachments even if previously deleted
• Discovery of other types of communications strings (Instant Messaging)

Can the recovery of information be guaranteed?

No, there are a number of factors that might affect waht information can be accessed.  There are programs that cn remove traces from computers or use internal disks command to permantly wipe hard drives.