INVESTIGATIVE SERVICES

At Computer Forensic Labs, Inc. we can search and analyze multiple pieces of media at one time. Many investigations involve multiple hard drives, floppies, zip disks, and other media. Evidence files can be duplicated onto another hard drive and examined by the investigators Computer Forensic Labs, Inc. while preserving the integrity of the media for discovery and trial.

Computer evidence is oftentimes the deciding factor in a criminal or civil action. Cases involving trade secrets, commercial disputes, misdemeanor and felony crimes can be won or lost solely with the introduction of recovered e-mail and other electronic documentation. If an attempt has been made to delete, erase, or otherwise hide critical evidence, you need a competent data recovery professional from Computer Forensic Labs, Inc.

We recommend that you DO NOT attempt to search for the evidence yourself because this can change important date/ time stamps as well as user information, thus, possibly obstructing the investigation.

PROCEDURES:

• We will create an exact replica of the hard disk drive or other storage device so the evidence can be evaluated and processed from a forensic evidence file. This guarantees the preservation of the best evidence and eliminates any possible guess work by the computer investigator.
• Identify leads and computer evidence contained in files and slack space, which can determine the outcome of the case.
• Document the findings and provide expert witness testimony to help clarify technical computer issues in the litigation process.
• Deleted data, hidden data, and password-protected data can be retrieved in many instances. The forensic investigators at Computer Forensic Labs, Inc. can find data on a formatted hard drive,deleted e-mail, intentionally altered data and in some cases media that has been physically damaged. The recovered data is then carefully documented, analyzed, and recorded in reports which are presented to the client and/or in litigation.

Critical Steps

Mass Quantity Hard Drive Data Wipe and Sanitization Services

The computer industry is full of situations where used computers are being sold and redistributed with hard disk drives containing confidential data. Critical data such as banking account information, information protected by HIPAA, credit card numbers, social security data, human resource, accounting and other internal documents, or even restricted information concerning a company's intellectual property can be compromised. At Data Recovery Link, Inc. and Computer Forensic Labs, Inc. we are constantly recovering data from hard drives from the previous owner of the computer or hard drive. In some cases illegal pornography has been discovered on computers that were sold on the used computer market and had supposedly been erased.

This confidential data on discarded and refurbished hard drives should be reliably and completely wiped and destroyed according to the industry standards set forth by the Department of Defense (DoD) 5220.22-M, the Navy Security Operations (NAVSO) P-5239-26(RLL/MFM) and the HIPAA data protection acts. See "Data Destruction Standards" below on this page.

Our procedures meet the security standards set forth by the HIPAA regulations and the protection of confidential information acts. Our procedures also meet the DoD 5220.22-M and the NAVSO P-5239-26 (RLL/MFM) standards for data destruction and sanitization.

Our Current Capabilities

• Capable of mass data destruction (Greater than 500 hard drives per day)
• Capable wiping speeds of up to 3GB/min on each drive (200 drives simultaneously)
• Single and low volume sanitization services are available
• Securely delete all the data and partitions on a hard disk
• The drive is able to be formatted and reused after our services are complete with no traces of previous data
• Completion and integrity Reports are available
• We support MFM, SCSI, IDE, P-ATA, S-ATA, Floppy, Zip, and Optical Media
• We can provide "Single Pass Sanitization" and DoD/NAVSO wiping services
• Our procedures meet the standards set forth by HIPAA

Data Destruction Industry Standards

• American: DoD 5220.22-M
• American: NAVSO P-5239-26 (RLL)
• American: NAVSO P-5239-26 (MFM)
• German: VSITR
• Russian: Russian Standard, GOST P50739-95