Computer Investigations and Computer Forensics

Computer Investigations and Forensics

Almost assuredly the newest and fastest growing area of private investigations has to be that of computer investigations and forensics. Every day, computer investigators are called upon to explore computers, and storage media for evidence of crimes and other information, which should come as no surprise. It is estimated that over 80% of all corporate information exists on electronic media. Besides corporate or commercial applications, how much information exists on a personal computer at home? How about every webpage you have ever visited, and every picture on every one of those pages? Banking information, logon information to secure sites such as chat, newsgroups, email, personals, back portals to work networks, etc. It doesn't take long to see the possibilities.

The applications for a qualified computer forensic private investigator are endless. There is virtually no investigation that is not touched by electronic media in some capacity today. Corporations are getting nervous about what can be done with computer forensics. An international insurance company has recently put out a policy that its adjusters are forbidden to exchange information about investigations, whether between themselves or between them and investigators, over any electronic means other than telephone. Everything that is typed on a computer is left there for later perusal by any forensics investigator that can find the computer.

So how do you go about selecting a computer forensic private investigator? More and more folks are hanging out their shingle after having spent a few bucks on a course. I get asked the question time and again, usually by someone with a case located outside of one of our home cities. “Why should we hire A.S.G. when we have people here locally?” There are four very solid components that a computer investigator or forensic specialist needs to possess. They need to have an absolute understanding of how all the parts of a computer work together to place the data on the screen. They must completely grasp how a hard drive works and how, where, and why data is saved to a hard drive or deleted from a hard drive. Unfortunately, there are large numbers of computer specialists with all kinds of degrees that think they can automatically do this because of their background. This is untrue.

The next component has to be a diverse arsenal of forensic software, hardware, and the intimate knowledge of how to use it. This is an extremely expensive proposition. Considering each piece of software can range from 1,200 - 3,000 dollars, and then the training can be another 3,000 - 10,000 above that, it can add up quickly. On top of this, no forensic specialist's toolbox should have only one of the programs that are out there. That would be doing the client a disservice. Each of the major programs has its strengths and weaknesses, and the exigencies of the case will determine which program is best suited. Sadly people with some money and some time to take some classes make up the largest portion of the 'unqualified' group.

The third component is the investigative mindset. Having a solid investigative background will obviously make you more effective in this field beside someone that doesn't possess that skill set. As a licensed private investigator, I have that experience, training and expertise.

The final and probably most important component is the ability to communicate. You could be the best forensic specialist in the world, but if you can't effectively communicate to your client, or more importantly, a judge and/or jury, all of the work is useless.

For more information please email me at kr1@asginvestigations.com