Green Mountain Consulting, LLC

There are many compelling reasons to use computer forensic services, but before taking that first step it is important to understand what forensics is and when and how to employ it. In simple terms, computer forensics is the preservation, extraction, identification, analysis and documentation of digital evidence in such a way that information can be used as evidence in a court of law. Digital evidence is any data that is recorded or preserved on any medium in or by a computer system or any other digital media device (e.g. GPS systems, MP3 players, cameras, cell phones, back-up tapes, etc.). This also includes metadata, which is information generated by a computer’s operating system or one of its applications; such as the date a file was created, last accessed and otherwise modified in any way. For example, a computer operating system such as Microsoft Windows® maintains a registry of many systems and user related information, such as when a specific application was run and by whom. It might also include a record of the installation/execution of particular programs that reveal the activities and suggest the intent of the computer user at any given time.