Frequently Asked Questions

For what purpose would I need computer forensics?

Any time you believe information exists on a computer that may be needed in litigation, you should immediately enlist the services of a forensics expert.

If the computer has already been examined by "the other side", do I need an independent exam?

Always have an independent forensics examination of any computer evidence that may be at issue.  While the other side may have already examined the evidence, it is likely they examined it for their purposes, not yours.  This is especially true in criminal cases inasmuch as law enforcement agencies rarely examine computer data for exculpatory evidence.  Although evidence of wrongdoing may exist, it is every bit as important to answer the questions of who, how, when, where and why.

Why can't my IT staff retrieve the data?
Although IT personnel may be very knowledgeable about hardware and software, a forensics expert is experienced in forensics methodologies and legalities needed for the evidence to hold up in court.

What should I do if I think evidence exists on a computer?
If possible, discontinue any use of the computer, place in a secure location and contact Loehrs & Associates to obtain a forensics image as soon as possible.