Records: Irreproachable record keeping means
that no action on our part shall go undocumented.
Cloning (not copying): Data is cloned
from original storage medium using the latest
in forensic computer technology. Clones are verified,
documented, and dated. The allows analysis without
risk of damage to evidence. Copying creates an
imprecise facsimile with omissions of pertinent
data and modification of dates.
Benchmarking: Often times, testimony can be
corroborated or refuted based on a system's actual
capabilities. SecondWave benchmarks and documents
the capabilities of each system with immaculate
Footprint Policy: All data is analyzed using
carefully thought out procedures and the latest
forensic hardware and software in order to assure
that data is clean and unaltered.
of Erased Files: More
often than not, remnants of deleted files lay
out of site, yet not out of reach. Once resurrected,
these files often make up the missing piece of
a puzzle that can make or break a case.