Lone Star Forensic Group

          Computer Forensics, which is also called "Hard Drive Forensic", is usually described as the examinations of Desktops, Laptops, and Server, as well as secondary storage devices such as External Hard Drives and Flash Drives.  In Digital Forensics such examinations can vary greatly based upon an examiner’s training, experience, and available tools.  As with other types of forensics,  a single approach can often miss crucial information that can make a difference in the case.

​

Important Factors in a Hard Drive Forensic Examination

1.) Evidence Integrity—An examiner should always treat a case like it's going to trial. Every piece of evidence should be treated as the most important and treated as such.

​

2.) Chain of Custody- A device’s travel should be recorded from seizure through examination.

​

3.) Imaging-  A proper examination starts with the imaging process.  A device’s data should be protected during this crucial process. This requires the right tools and training.  A failure at this stage throws the entire examination in to question.

​

4.) Examination- The right tools in this process is crucial. The correct tools are expensive and difficult to master.  Our examiners have access to the industry's gold standard products such as Encase and FTK, as well as cutting-edge technology such as Axiom, Digital Collector, Digital Inspector, and Gargoyle.

​

5.) Reporting—All of the skill and work that goes into Stages 1-4 can be for nothing if the results are not properly reported. The results need to be provided and conveyed to the right parties in a manner that they can understand and use. In many cases, testimony in front of a judge or jury will be required. Our examiners have testified in numerous courts all over the United States. We have the ability to convey technical data in a way that is understandable and relatable.

​

Windows Forensics

                 The Windows operating system is the most common form used in the World.   Items that are not viewable to a user can be extracted and parsed through digital forensics.  The right tools and the right methods can give a wealth of information to those that need it.  The artifacts located in a Windows computer can be so numerous that the most advanced AI tools are needed to isolate and identify useful information. 

​

Mac Forensics

​

          Forensic examinations on an Apple Operating System require techniques, training, tools, and experience different from traditional Windows systems. System reports are located in different containers and require a different skill set to acquire, process, and analyze them. The imaging techniques for an Apple Computer require a different set of tools and skillset to properly acquire the data without damaging the physical components.  

 

            The Lone Star Forensic Group has invested in significant infrastructure, tools, and training to properly handle these incredibly popular devices.  Our examiners have analyzed hundreds of such devices.