Computer Forensic Services

Our Computer Forensic Services

Computer Forensics is the practice of using predefined processes to collect, analyze and report on digital evidence, in a manner that is admissible in court. Using trained and experienced professionals, you can count on Teel Tech Canada to handle your computer(s), servers and external storage devices in the most forensically sound manner.

Our team of forensic experts use trusted, software, hardware and techniques to process your equipment in four phases;

• Acquire and Preserve your data.
• Identify and Extract data relevant to your investigation.
• Analyze and Interpret the data breadcrumbs to piece together what took place and, if necessary, help identify the user behind the keyboard.
• Document and Present the evidence found, to be presented in a way a layperson can understand.

From a single laptop or desktop computer, in a home environment, to a multi-location corporate server network environment, our team of experts can handle your computer forensic requests across Canada. We have extensive experience working in the digital evidence world while being able to compile and explain the investigation in layperson terms.

Whether we are engaged to assist with a private, corporate, or law enforcement investigation, our forensic examination always begins with the same initial steps. We obtain a forensic image of your data in a manner that gives us the files/folders, as well as what has been deleted (but not yet overwritten) on your computer system. We preserve that data and work on the forensic image we have obtained. This allows you to continue operating your business. In the case of a law enforcement investigation involving illegal material, the originally seized data can be secured for court purposes. Throughout the process, we maintain the chain of custody of your computer equipment.

Using information gathered during our initial engagement meetings, we identify and extract the data which is relevant to your investigation. We piece together data that is not saved as individual files, which help show what activity was taking place on the computer system at the dates and times in question, and/or surrounding the activity of concern. And lastly, we document our findings and present those to you in a report that is easily understood.

Why Call A Forensic Expert?

There is a natural tendency to use your firm’s computer network administrator, or your computer savvy neighbour, both of whom ‘know computers.’   However, it is important to recognize that specialized training and experience is a requirement to be great at any job.

• My neighbour is a well-known labour and employment lawyer, would I hire her to represent me in a real estate closing?
• My best friend is a heart surgeon, would he be the first call if my son needs a root canal?

It is also important to recognize that opposing counsel will quickly raise ‘bias’ when a firm has its own staff conduct the forensic investigation.  An in-house investigation by another employee is certainly more likely to lean toward what the employer believes happened.   Our forensic experts are hired to analyze and interpret all of the information, presenting our clients with the truth, no matter what it may be.  It is important to understand a computer forensic investigation may prove or disprove, an allegation.

One of the key factors in computer forensics is the preservation of digital evidence.  When an employee was dismissed from their job, they were permitted to pack up their belongings without supervision.  It was during this time when several corporate documents, emails, as well as the company’s accounting system database, were deleted from the employee’s computer.  Considering possible electronic evidence only as an afterthought, management engaged the services of their firm’s IT support personnel to investigate.  The IT person started up the computer system, logged in and checked the recycle bin for deleted files.   A subsequent forensic analysis not only revealed the start-up of the computer system by the IT professional, but it also uncovered that computer system start-up resulted in the permanent overwriting of the previously deleted accounting system database.  So, although many documents, spreadsheets and over 300 email messages were recovered, the innocent actions of the IT staff member, caused the permanent destruction of the firm’s accounting system.

You need a computer forensic expert when:

• Someone is interested in wrongdoing,
• They have access to a computer.

In this situation, there is a high probability the computer was used to create the wrongful act (the computer itself is the crime scene) or that related documents were stored on the computer (provides evidence or insight into a crime).  In either case, Teel Tech Canada will work with you to recreate the electronic footprints of that user’s actions.

Remember; the most accurate results come from your decision to call a professional.