Data Forensics and Electronic Discovery

Technical Services

Computer Forensics


Electronic evidence and digital discovery are necessary in today's legal world. Federal Rules of Civil Procedure require disclosure of electronic evidence since the bulk of business and individual rely on electronic data storage and communication. For instance, e-mail is the primary business communication medium and the volume of work done in digital systems is increasing. Companies now have a burden to preserve relevant electronically stored data - and attorneys have an obligation to provide preservation notice and guidance to them. Also, attorneys have an ethical duty to ensure that proper preservation of electronically stored data occurs and an obligation to ensure client discovery disclosures comply with rules regarding disclosure of electronically stored data.

Computer Forensics

Computer forensics uses scientifically derived and proven methods for the purpose of analyzing or reconstructing digital evidence such as:
  • Forensically sound data acquisition methods
  • Scientific examination of devices and data
  • Chain of Custody management
  • Scientific analysis of electronically stored data
  • Recovery of data (both live and deleted)
  • Development of systems and data timelines
  • Data and metadata validation

Electronic Discovery

Electronic discovery as it relates to discovery in civil and criminal cases is:
  • Locating relevant data
  • Collecting relevant data
  • Preparation of relevant data for disclosure

Related Information