Digital Forensics

Avalon's computer forensics division carefully collects, tracts, and examines your data - defensible methods that help ensure your evidence will stand up in court. Our Certified Computer Examiners (CCEs) are trained in the latest forensic techniques and can harvest your electronic data from virtually any operating system and a wide range of storage devices.

Forensic Data Collection

We always collect two copies of every source: a “working” copy for use in analysis and a “pristine” copy which is inventoried, sealed, and locked in our data vaults. All collections are conducted while maintaining a defensible Chain of Custody (COC).

Forensic Examinations

Our CCEs are capable of working with firm personnel and corporate IT contacts and will provide a free initial consultation. Our examinations include:

• analysis of metadata
• e-mail, deleted-file, and Internet-user activity recovery
• acquisition and examination reporting

Proactive Hard Drive Preservation

When a key employee leaves your company, Avalon recommends that a forensically sound image of his/her computer be made.

Certified Drive Wiping

We can image and preserve the potential evidence, then wipe the computer clean and prepare it to be reused by your IT staff.

Data Recovery

During the forensic analysis of evidence, we can attempt to recover deleted and orphaned files and folders, which are usually not visible without the use of specialized forensic software.