Vestige exceeds Industry Standard methodologies and protocols established by a number of Professional Associations specific to Computer Forensics. As an organization comprised of forensically-trained trial attorneys and forensically-trained IT professionals, Vestige derives its protocols from applicable case law, best practices and standards promulgated by our industry. In nearly all aspects Vestige exceeds these protocols by adding our expertise to the mix.

"We treat every case as if it is going to go to trial...that way we're well prepared for those that actually do."

 

Some of the specific methodologies that we embrace:

• U.S. Department of Justice Guidelines on the Searching and Seizure of Electronic Evidence
• International Society of Forensic Computer Examiner's (ISFCE) Code of Ethics and Professional Responsibility
• ISFCE's Certified Computer Examiner (CCE) certification requirements
• Guidance Software's EnCE certification requirements
• National Institute of Standards and Testing (NIST) Computer Forensics Tool Testing (CFTT) project

Acquisition / Imaging

Vestige's work begins by identifying relevant electronic data sources for which we then create forensic clones. A forensic clone also goes by a number of synonyms such as: bit-for-bit imaging, byte-for-byte imaging, mirror image and exact copy. Vestige's protocol ensures that the clone we take is an exact duplicate of the source drive and provides a mechanism for authenticating the evidence down-the-road.

Analysis

Vestige has an arsenal of over 250 tools that we use to properly analyze the evidence and bring meaning to the electronic "footprints" or artifacts that are left on electronic media. Testing of the results of our analysis is tantamount to our methodologies and success. As we analyze the evidence, our hypotheses surrounding the findings are tested using an environment as close to or the same as the source environment--this provides the truest results and adds strength to our findings.

Reporting & Testifying

Vestige's experts have testified in both state and federal cases numerous times. While only a small percentage of cases ever require testimony, Vestige is well prepared to provide opinions via affidavit, testimony at deposition, hearing testimony and trial testimony. For those cases that don't require testimony, Vestige conveys results orally or prepares written reports including Expert Reports.