A systematic approach or methodology in the seizure, preservation and retrieval of computer or electronic evidence, accepted for use in a court of law.

System Analysis

To investigate system related incidents such as unauthorised modification of program files, computer virus infection, logic bombs through forensic analysis of system files and system-related logs.

Data/Information Analysis

Forensic analysis of file structures and systems for the purpose of searching and recovery of relevant data and information.

Forensic investigations:

• Identification of Suspects
• Identification of Target Machines
• Pre-seizure Planning
• Seizure and Preservation of Evidence
• Analysis of Exhibits
• Interviews
• Retrieval & Presentation of Evidence