As difficult as it would be to scan a directory of every file on a computer system, it would be equally difficult for law enforcement personnel to read and assimilate the amount of information contained within the files.
It is likely to be impossible from a practical standpoint to completely and exhaustively examine every file stored on a seized computer system, as the average storage capacity in a personally owned microcomputer approaching 30 gigabytes (GB; Fischer 1997), and systems readily available that have 60-GB storage capacity or more. Computer forensic science is used most effectively when only the most probative information and details of the investigation are provided to the forensic examiner. Even though the examiner may have the legal right to search every file, time limitations and other judicial constraints may not permit it.
At AKATI Consulting, we can help by conducting a simple but thorough examination of your computers if your department is finding it hard to cope with the backlog or if you need help on a one-off operation.
References
Fischer, L. M. I.B.M. plans to announce leap in disk-drive capacity, New York Times (December 30, 1997), p. C-2.
Back to Services - Information Forensics
|
