Data Forensics

Data Recovery New England provides a wide variety of data forensics services. We will ensure a documented chain-of-custody for each and every case we handle, and will spare nothing to guarantee the integrity of any evidence.

Our Data Forensics services will preserve the original media and protect the data from alteration. We can then perform the following:

• File deletion analysis
  • Detect remnants of deleted data and recover intact blocks.
• Modification and access time analysis
  • Detect modifications and attempted obfuscation of modifications.
• Operating system event log analysis
  • Analyze OS audit logs to determine changes to the system (connection of an external disk, etc.)