What the service can include
- Evidence preservation and device intake
- Logical, file-system and physical acquisition where technically available
- Messages, calls, contacts, media, application and location artefacts
- Deleted-data and timeline examination
- Court-ready reporting and expert explanation
Evidence-led methodology
Work is scoped to the instruction and available evidence. Relevant material is preserved, documented and examined using repeatable methods. Findings distinguish observed facts, technical interpretation, limitations and matters requiring further corroboration.
Typical deliverables
Depending on scope, deliverables may include acquisition records, hash schedules, examination notes, timelines, extracted exhibits, expert reports, affidavits and consultation or testimony.