ESI Consulting

What Is Computer Forensics?

Computer Forensics is generally defined as the identification, acquisition, examination and preservation of  Electronically Stored Information (ESI) using specialized analytical and investigative techniques. These specialized analytical and investigative techniques constitute a "forensically sound" manner and are what separates your local IT department and a true computer forensic examination.

An examination which does not follow forensically sound procedures can destroy evidence, make the results inadmissible in court, and subject the examiner and the client to legal and monetary penalties. Mishandling ESI is akin to altering a paper document. Computer Forensics involves the proper handling of ESI at every step. Computer Forensics is not just copying a hard drive and searching for files.

The worst thing you can do is conduct an examination on your own, or with your in-house staff, without following proper procedures. For a very cogent article explaining "The Dangers of Do-It-Yourself Computer Forensics" read the article with that title by Erik Shirk in the November 2007 issue of Law Practice Management at http://www.abanet.org/lpm/lpt/articles/tch11071.shtml

At ESI Consulting, we have the experience, education, tools, and ability to provide computer forensic services in a manner to ensure that your goals are achieved, namely the development of relevant evidence that is admissible in court or any other venue. For a more detailed list of some of the computer forensic services we provide, please visit our forensic services page.

Latest News

Cell Phone Forensics

ESI Consulting now provides cell phone and pda forensic services. With the latest hardware and software, we can examine more than 1900 different models, including Blackberry and iPhone.

Depending on the model and configuration, we can usually forensically retrieve the following ESI from a cell phone, pda or gps device:

• SMS History (Text Messages)
• Deleted SMS (Text Messages)
• Phonebook (both stored in the memory of the phone and on the SIM card)
• Call History
• Received Calls
• Dialed Numbers
• Missed calls
• Call Dates & Durations
• Datebook
• Scheduler
• Calendar
• To-Do List
• Filesystem (physical memory dumps)
• System Files
• Multimedia Files (Images, Videos, etc.)
• Java Files
• Deleted Data
• Quicknotes
• More...
• GPS Waypoints, Tracks, Routes, etc.
• RAM/ROM
• PDA Databases
• E-mail
• Registry (Windows Mobile Devices)

Trained, Certified, Experienced

Richard Connor was trained in computer forensics by some of the leading experts in the field, people who have also conducted training for Fortune 500 corporations, Big 5 accounting firms, the FBI, DEA, the U. S. Department of Defense, the U. S. Environmental Protection Agency, the Central Intelligence Agency, the National Security Agency, the U. S. State Department and other government agencies.

Mr. Connor holds a Professional Development Certificate from Oregon State University in Computer Forensics. He is a AccessData Certified Examiner (ACE), a Certified Computer Examiner (CCE), a Digital Forensics Certified Professional (DFCP), and a member of the International Society of Forensic Computer Examiners (ISFCE).

Mr. Connor has conducted many computer forensic examinations in different types of cases, including child pornography, child predator, tax fraud, financial fraud, insurance fraud, mortgage fraud, domestic disputes, identity theft, breach of contract, homicide, theft of intellectual property and trade secrets, and others. He has also testified as an expert witness in state and federal court.

Request More Information

Sign up today to receive additional information, such as our Retainer Agreement, CV, references, and more.

Comments? Questions?