In fact, forensic investigations take an entirely new turn when it comes to electronic data. With the right knowledge and resources, the deletion of files itself is a traceable and reprehensible act. At Law & Forensics, we have the requisite knowledge and resources to uncover deleted files and detect destruction or attempted destruction of evidence. Whether appointed by the court to investigate inference of guilt due to destruction of electronic evidence, or by a party to explain destruction, Law & Forensics’ team of electronic forensic experts excels in the determination of spoliation.
Data loss is inevitable, especially at the hardware level. While physical hard drives are designed to have a mean-time between failure of well over a million hours (that’s almost 115 years!), recent research has established that 2 to 4 percent of the hard drives at a given company (as high as 13 percent in some environments) will need to be replaced on an annual basis. This is particularly true when hard drives start having scan and reallocation errors. These drives are almost 40 times more likely to need replacement over the next 60 days than a drive that has no such problems. Given this knowledge, most corporations plan for hard disk failures and initiate backup tape protocols that allow data to be restored on demand. While this approach has merit – since files that existed when the tape backup snapshot was made can be restored – it does little to assist in the recovery of deleted files. This is a critical issue when deleted files are the focus of the litigation process. These deleted files can either be the “smoking guns” that make a case for a plaintiff, or the missing data that establishes innocence for the defendant.
Law & Forensics recognizes that having the ability to recover deleted data at the hardware level is a core service in the forensic analysis process. As a result, Law & Forensics has partnered with a select group of vendors capable of providing secure certified cleanroom environments (ISO 5) that facilitate the highest rate of data recovery in the industry. These vendors utilize the most advanced methodologies possible to recover your data at a reasonable cost. In addition, all of our partners offer a guarantee policy that if they are unable to recover your data, there is no charge for the services performed.