Marcum Computer Forensics is a team of professionals committed to preserving and analyzing evidence and preventing data destruction. They deliver their results in an understandable, usable format, so you spend less time reviewing irrelevant data and more time focusing on your case.
Discover the Whole Story
Email, documents and deleted information may be stored in unexpected locations, and our computer forensics examiners have the experience to find these caches. Data may be contained in servers, workstations, PDAs, cell phones, CD-ROMs, USB memory devices, backup tapes and archiving systems.
Marcum Computer Forensics provides assistance with a variety of matters relating to electronic data, including:
Pre-litigation support
Electronic production and evidence preservation
Computer investigation
Incident response
Education
Information systems auditing
Marcum Computer Forensics Helps You Uncover the Details
Our clients turn to us to help them understand the value of electronic information and how it can be used to their advantage. We help them ask the right kind of questions, so they may receive the relevant information they need to build an effective case. And if the other side says the data does not exist, we can help verify that they are, indeed, telling the whole story.
What is the difference between intentional and accidental data destruction?
Intentional destruction
"Wiping" software - utilities that can permanently eliminate evidence - are common. In fact, Mac OS X has a free, built-in utility. Also, tools such as Citrix, VNC, and Go2MyPC enable one to delete data remotely. However, even when the files themselves are irretrievable, evidence that deletion occurred may be valuable.
Accidental destruction
Evidence may be deleted unintentionally through automated maintenance routines such as disk optimization and automatic emptying of email "trash bins." An IT department may unintentionally destroy evidence while following standard policies and procedures which dictate that backup tapes should be reused.