Computer Forensics is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what actions were executed on a specific computer and who was responsible for those actions.

At Electronic Evidence Labs (EELabs), we specialize in the recovery of the digital "fingerprints" left by the routine use of computers and other electronic devices. EELabs can even recover and examine previously deleted files, utilizing various versions of software and techniques ensuring that our clients have all the pertinentevidence available to support a thorough investigation.

Personal computers, laptops, servers, PDA’s, cell phones and other electronic devices have become increasingly important as sources of evidence in fraud, white-collar crime and other investigations in recent years. In many cases, these devices are the repositories for digital evidence that is essential to the investigation. Communications sent by email or files that are found on a computer can make or break a case.

EELabs is one of the Nations largest providers of computer forensics with engineers located in over 15 states covering the top 40 cities in the United States. Our highly skilled engineers possess several years of experience as well as the following certifications: EnCase Certified Examiner (EnCE), Computer Certified Examiner (CCE), Certified Electronic Evidence Collection Specialist (IACIS), Certified Information Systems Security Professional (CISSP), Security+ and many more.

EELabs offers computer examinations tailored to the needs of our clients, based on escalating levels of intensity for each examination. Generally, this escalation is apparent at three examination levels: basic, standard, and advanced.

At a basic discovery level, the specified computer hard drive is previewed and the original media is accessed, but not imaged. A significant amount of data may be discovered at this level and an evaluation of potential evidence determined, especially if defined data is known and requested (such as the recovery of a specific file).

The most frequently required type of examination, a standard examination, is more extensive, requiring that an "exact-copy" of the media be created, which is then used during the examination. This focuses on the recovery of specific data (both deleted and active): text, graphics, date codes, and many more. Examination time is widely variable, depending primarily on the client's requirements, applications necessary to extract data, scope of keyword searches, operating system, size of the hard drive, and other factors.

EELabs is equipped with multiple workstations in our lab and has the capability to run several forensic machines simultaneously. This allows us to quickly process data from any case, regardless of size or complexity. The most extensive examination is an advanced examination, which includes a full investigation of trace artifacts, latent evidence, slack and unallocated space, and a comparative analysis of the data, date codes, links, a full-and-complete examination and analysis of the media and related corroborative evidence on a computer. This examination is not strictly dependent on specifics from the client, but is essentially a full and complete investigation. This advanced examination is especially useful when seeking computer evidence that is confirmed from several related areas within the computer. The final results may provide irrefutable evidence that is then used to corroborate or refute specific allegations. For example, date codes may be linked to specific files, which are linked to artifacts, graphics, e-mail, or other file formats. Factors to consider include those previously noted in addition to password protection, hardware configurations, keyword searches, report complexity, and more.

EELabs Helps Reduce the Risk of cyber crime. The latest techniques to minimize the risk of computer-based fraud and abuse are top priority at EELabs. Organizations need to defend themselves against cyber crimes, which have been identified by recent Gartner research as being a key growth area over the next four years.

EELabs provides an investigation service that adopts a layered approach allowing our clients to retain fiscal control and direction while maximizing the value of our expert knowledge and experience. EELabs recognizes that evidence based on a computer is extremely volatile and will degrade rapidly. To this end our mission is to respond to your needs immediately.