Digital Forensics
A defined order. A disciplined collection.
Support counsel with planning and execution of digital evidence collection within the instructions and scope of a court order.
01
Translate the order into a collection plan.
Discuss the order, the roles of those attending, permitted sources and the operational constraints. Questions about legal interpretation remain with counsel and the responsible officers.
02
Prepare for the environment.
Consider expected devices, account access, business interruption, staffing and the need to document unexpected conditions. Avoid treating every source encountered as automatically in scope.
03
Maintain a clear record.
Record the collection, handling, exceptions and limitations. Deliver preserved material in accordance with the agreed instructions and applicable direction.
RELEVANT SOURCES
Start with what is available.
Discuss the sources that can help answer the question, within an authorized scope.
Devices and sources within the orderBEFORE WE BEGIN
A more useful first conversation.
- Provide the order and counsel’s instructions.
- Clarify attendance, timing and roles.
- Discuss expected systems and access constraints.
RELATED ARTICLES
Useful before you need us.
Practical perspectives and clear next steps.
YOUR NEXT STEP
What do you need to understand?
Tell us what you need to understand.