SERVICES > ESI PRESERVATION

Preservation of ESI

Preservation of Electronically Stored Information

Forensicon's team of trained forensic examiners is supervised by Lee Neubecker, Forensicon's president and licensed private detective.  Forensicon's staff has been trained in the best practices of electronic data collection.  From logical collections of native files to bit-stream forensic imaging (aka mirror imaging, hard drive cloning), Forensicon is experienced in capturing a variety of data types using cutting-edge technologies and industry best practices. 

Data preservation can be accomplished by making a valid forensic image using software such as Encase.  The difference between conventionally copying a hard drive and a forensic copy is that a forensic copy is a complete bit-stream copy of the original, including all unallocated spaces where data may be hiding.

Preserving electronically stored information swiftly and as required can help prevent attorneys and their clients from facing sanctions for failing to act promptly to preserve key data. 

Forensicon has collected hundreds of computers in less than one business week.  Forensicon is able to minimize client downtime and can provide weekend and off hours collection services to clients needing to avoid business disruptions.

Forensic imaging services sometimes can be referred to as:

A valid forensic image is one that has been captured and documented by a trained individual. A hash algorithm is used to compare the original and copy to authenticate that a valid image was created.

Forensicon staff are also adept at managing hostile imaging situations where adverse parties are present and may not want the process to run smoothly.