Separately or within a wider digital investigation, a forensic analysis is carried out
whenever there is hardware with information that can be analysed: hard disks,
PDAs, USB memories etc. By applying advanced techniques to recover lost data
and automated cross-research and correlation, it is possible to locate in such
mediums the information fragments that may meet the needs of the customer.
Some of the facts which can be obtained by means of a forensic analysis include:
- Partially or totally deleted files
- Communication trails through e-mails and instant messenger services
- Mass copying of files from a company server
- Production of a time line allowing events to be reconstructed
|
|
