When a user deletes data from computer media, although it is no longer visible to the user, it is not necessarily removed from the computer. Our forensic techniques can usually retrieve this information without risking additional damage or losing the chain of custody that would make the recovered data admissible as evidence.
Until recent years, computer forensics techniques have been available almost exclusively to law enforcement agencies. However, Electronic Evidence Retrieval provides these same services to the private and public sectors.
EER has decades of experience in working with electronically stored information (ESI) in response to litigation. Our e-discovery services include:
- Search for deleted emails
- Evaluation of backups and logs
- Reconstruction of computer event timeline
- Mobile phone data retrieval