top of page

Labs :: Evidence Handling
Let us take care of the evidence handling process

Forensic ACQUISITION
 

Transferring data data from a source device to a destination device with exactitude.

​

This involves the use of write-blocking equipment and high-integrity storage. 

​

The result is either a forensic copy (called an "image") in a digital format or a duplicated physical disk.

A report with a "fingerprint" is provided for integrity verification.

​

More details

​

​

 

Simple pricing

​

175 $ per source device

  + 25 $ per TB of data copied
 

  + fair cost of destination disk(s)

  + forensic storage
     (if needed for images)

​

Forensic
STORAGE

 

Storing data in a secure manner with the highest level of confidentiality, integrity and availability possible.

​

A "fingerprint" of the stored /data is provided for integrity verification.

​

Data is stored per customer in encrypted containers with independent keys.



 

​

More details

​

​

 

Simple pricing

​

375 $ per TB, monthly

​


​


 

Let us take care of the evidence handling process

​

Digital evidence requires the highest care to maintain the required availability and integrity to support your investigations.

This is why we will apply the forensic methodology to your devices and data, including a proper chain of custody (documentation and paper trail).

​

There are many ways of exchanging the evidence material between yourselves and us, depending on type, fragility and sensitivity:

  • You can get your physical devices items delivered to our lab via a trusted courier with signature;

  • You can upload your evidence data to us via a secure data exchange platform;

  • We can access and secure the evidence within your environment remotely;

  • We can dispatch a forensic examiner to your premises to take charge of the evidence.

​

Get in touch with us to determine the appropriate means depending on the situation.

​

More information

HARDWARE

  • Acquisition stations:

    • We build our stations ourselves for forensic acquisition tasks, with low-noise, cost-effective and premium off-the-shelf parts.​

    • Highly multicore fast processors (8 cores / 16 threads and above);

    • Fast memory kits (64 GB and above);

    • Enterprise-grade premium hard-drives models for maximum integrity and durability;

    • Dedicated RAID controller for high-integrity operations and fault-tolerance;

    • Fast work SSD/NVme storage;

    • Self-contained in a water/dust-proof storage and transport container.

​​

  • Write-blockers:​

    • We use industry-approved professional-grade equipment from reputable vendors including:​

      • CRU/Wiebetech​

      • Tableau

      • Deepspar

​

  • Imaging:

    • We use fast quality drives (SSD/NVMe) to store temporary images during the extraction/copy process.​

    • We use quality enterprise-grade drives to store the images and provide them to you, and ensure the best durability and integrity of your data.​

​​

  • Copying:​

    • We use quality enterprise-grade drives (matching the format/size of the originals) to receive the copies and provide them to you, and ensure the best durability and integrity of your data.​​

​

  • Lab storage:​

    • We use an enterprise-grade storage server with the highest quality redundant disks (RAID 10) to ensure the best availability and integrity of your data.​

​

SOFTWARE

  • We use industry-approved professional-grade software from reputable vendors including:​

    • Access Data;

    • Magnet Forensics;

    • CRU/Wiebetech;

    • Sumuri.

​

POWER CONFIDENCE & SUSTAINABILITY

  • External automatic generator for whole-site power backup.

​​

  • Quality 80+ Platinum efficiency power supplies in our servers and stations.

​​

  • Monitored intelligent UPS for:

    • Optimal power curves;

    • Surge protection;

    • Power-loss compensation;

    • Clean hypervisor shutdown for data integrity in case of complete power failure.

​

PRICING DETAILS

  • Our prices are expressed in USD currency;​​

​​

  • As some services refer to data sizes, we will use the following standard definitions for our calculations:

    • 1 TB = 1024 GB

    • 1 GB = 1024 MB

 

(The units should be written TiB, GiB and MiB for exact science and the use of powers of 2, but we want to keep the details simple. In the end our customers save money by calculating this way. See this article for the scientific differences between the unit representations.)

​

More information
bottom of page