A Computer continually generates a mass of information which, unless its user has been extremely careful, will be retained, even after deletion. If handled and interrogated correctly this material can be used as evidence in most courts. However, to ensure that it remains admissible requires a thorough understanding of evidence handling procedures, as well as the necessary technical skills to produce and retain an exact mirror image and working copy.

Once a safe copy has been secured, the data can be interrogated. However, computers by their very design generate huge volumes of material for examination and analysis. Our investigators are therefore trained and experienced at systematically searching bulk material. With the aid of specialist search tools gigabytes of data can often be searched in minutes rather than days. However, experience has taught us that there is no substitute for a manual review by an experienced investigator with an inquisitive mind.