"Whenever two items come into contact, something from one is exchanged to the other"
The above quote is known as the Locard's Exchange Principle. It was stated by Edmond Locard (1877 - 1966), the director of the very first crime laboratory. It basically means that in any crime, the criminal takes with him or leaves something during the execution of his deed. One of the goals in forensic studies is to use tools and techniques that identify such traces. It is important that these are not altered or destroyed in the process so that they can be later associated with the perpetrator.
Although Dr. Locard died before computers became mainstream tools available to one and all, this principle still applies to information and computer forensics. Technological forensics requires specialized expertise and tools to meet the Court's criteria. Not all forensic investigations end up in court; many organizations perform such activities in order to circumvent or investigate possible fraudulent activity.
Information and computer forensics normally involves the investigation and examination of computer system(s), including, but not limited to, the data acquisition that resides on the media within the computer.
Information and Computer forensics experts must:
- Identify sources of documentary or other digital evidence.
- Preserve the evidence.
- Analyze the evidence.
- Present the findings.
Forensic techniques are not only applied to areas related to criminal activities. Certain aspects of this specialised subject are used to recover data from a computer belonging to a deceased or incapacitated relative. Imagine that the only photos of a relative who has passed on are on his computer. We use some of the techniques to get you the pictures you seek.
If you would like more information about our service in this field, please send an email to [email protected].