Call Us: US - +1 845 478 5244 | UK - +44 20 7193 7850 | AUS - +61 2 8005 4826

digital information

The first step is to make an exact image of the digital information extant on the device—a virtual snapshot that leaves intact on the device the original data and metadata. The forensic examiner’s oath is to do no harm, to leave the device “as is” and only apply data extraction software to the forensic duplicate image—never to the original data.

A variety of forensic software is available to help extract digital files. This includes programs specifically designed to recover and analyze deleted Internet search histories.

A skilled forensic examiner, following careful, evidence-preserving protocols and employing the right data extraction tools, offers the best chance to recover digital files that can be used later in court