Forensics

Color Logo

Employee Area

Client Area

Click Here for
Cell Phone Forensics

Download our brochure

Bill Perry & Associates, Inc.

Evidence Recovery

If you need to prove or disprove that your spouse used the computer to move or hide money and information that you can’t find, we can help. People use computers for everything, many of which may be negative, including cheating, lying stealing, hiding money, having an affair and just about every other thing you can imagine.

Frequently, these same people clean out the computer before they depart by deleting “everything” or “reformatting” the computer. The reality is THE EVIDENCE IS STILL THERE, waiting to be found. Often we can even prove what steps they took to try and destroy the evidence! The only question is do you want it or not.

Why would a Private Investigator be involved in this work?

Simply put, the art of computer data recovery by private investigators came from more traditional assignments, like e-mail tracing, locating web site owners, identifying computers on the internet, etc. The handful of Private Investigators who focused in this area became more and more involved in recovering information from computers. They spent countless hours working in this area. At Bill Perry & Associates, Inc., we are comprised of Retired Law Enforcement Detectives, whose experience range from Computer Forensic Specialist to Seasoned Crime Investigators. We can get the evidence you need off of a computer that has been cleaned.

The obvious advantage of working with Bill Perry & Associates, Inc. is that like any other assignments we take as licensed private investigators, our relationship is 100% confidential. We recover the computer evidence that few others could and we do so in a legal privileged and protected investigation. Keep your affairs private.

Forensic Data Recovery

Forensic Data Recovery is the science of recovering information from a computer that may have been deleted or otherwise damaged or hidden.

One of the key elements in every data forensics procedure is time. Users may unintentionally or inadvertently overwrite evidence simply by continuing to complete their daily tasks. Our specialists will quickly and cost-effectively collect and preserve data or evidence that may have been deleted or become inaccessible through normal computing methods. Our specialists can determine if certain information exists and, if so, where it might be located.

When the data storage media is recovered either on location or at our facility, an accurate audit trail commences. The media is immediately logged into a tracking system and a log is produced. This log, suitable for all legal proceedings, accompanies the media throughout the recovery process. Bill Perry & Associates, Inc.. will then ensure the continuity of evidence by adding the investigator’s name, signature, date and a detailed description of what was done.

At this stage of the process, Federal Rules of Evidence apply. Our company’s expertise in magnetic media storage devices begins to play a crucial role. First - the media is replicated exactly through a bit-by-bit acquisition process, ensuring the integrity of the subject media is intact, and evidence preserved. Our specialists then work only with duplicate copies ensuring that no contamination of the original data takes place.

Our services include electronic discovery consultation; onsite seizure of the evidence; thorough processing of the evidence; interpretation of the results; reporting the results in an understandable manner; and court recognized expert testimony. In this preliminary examination, Advanced Surveillance Group provides the client a detailed report outlining file structures, media integrity, and the recoverability of deleted files. This report may be used to determine if the files present will be of assistance in the investigation. Our specialists will then make recommendations on how to proceed if further information needs to be retrieved. This report allows our clients to make an informed decision on the various options that may be available to them. The client’s needs augmented with our recommendations assure that the time spent on the analysis is focused at all times.

Here is a brief list of what is possible:

  • · Recovery of deleted computer files
  • · Data recovery even after a hard drive has been reformatted or repartitioned
  • · In many cases encrypted files can be decrypted
  • · Determination of web sites that have been visited
  • · Determination of what files have been downloaded
  • · Determination of when files were last accessed
  • · Determination of when files were deleted
  • · Discovery of attempts to conceal or destroy evidence
  • · Discovery of attempts to fabricate evidence
  • · Discovery of hidden text that was removed from the final printed version of a document
  • · Discovery of faxes sent or received on a computer
  • · Discovery of E-mail messages and attachments even if previously deleted

  • Recovery of financial records and other documents

We Provide:

  • · Analysis of Computers and Data in Criminal Investigations
  • · Onsite Seizure of Computer Data in Criminal Investigations
  • · Analysis of Computers and Data in Civil Litigation
  • · Onsite seizure of Computer Data in Civil Litigation
  • · Analysis of Company Computers to Determine Employee Activity
  • · Assistance in Preparing Electronic Discovery Requests
  • · Reporting in a Comprehensive and Readily Understandable Manner
  • · Computer Forensics on Both PC and Mac Platforms
  • · Our clients include law firms, corporations of all sizes, as well as Provincial, State and Federal Agencies.