I help preserve digital material before further use of a device or system alters available traces. The service covers agreed data sources and documentation of how the material was acquired.
What can be preserved
- Data from phones, computers and storage media.
- Available backups, files and electronic correspondence.
- Logs and other data needed to reconstruct an event.
The method depends on the source, its condition and technical access. Different devices and accounts allow different levels of data acquisition.
What the service includes
- Identify sources — establish which devices and data are relevant to the matter.
- Plan preservation — agree on the sequence of actions, access and handover.
- Acquire data — create an appropriate copy or export, depending on technical capabilities.
- Check integrity — document the material and use checksums where applicable.
- Hand over the material — describe the actions performed and agree on storage or further analysis.
What you receive
The preserved material within the agreed scope, together with acquisition documentation. A copy alone is not a full expert examination; digital forensic analysis can be agreed as the next stage.
When to contact an expert
If a phone, computer or logs may contain relevant information, agree on a procedure before browsing, copying or repairing. For the initial conversation, prepare a short description of the situation, the types of devices and their current state.