PRESERVATION

Elijah’s data preservation processes begin most importantly with our highly experienced, certified team of computer forensic examiners. As an initial matter we can provide technical insight regarding potential locations of Electronically Stored Information (ESI), and can participate in devising an appropriate, proportional plan for the preservation of potentially responsive data.

After identifying the data to be preserved, our rapid response teams are trained to create forensic images of electronic storage media and perform selective collections of ESI in a verifiable manner that preserves key metadata and drive areas often missed by other collection methods. We use leading industry software and established techniques to ensure that the ESI we have obtained is identical to the original data, and we perform detailed chain of custody tracking to document our processes. Then, before examining any evidence, Elijah creates a forensic backup of all collected data to ensure that a working copy always is available. When done with this, however, Elijah’s preservation work has only just begun.

Data preservation entails not just the collection stage, but also a continuing obligation to maintain the security of the preserved data. The loss or theft of storage media containing personally identifiable information can trigger expensive and embarrassing disclosure requirements. In a bank, customers never would consider depositing their valuables in unlocked, unwatched safety deposit boxes, even if the bankers were highly talented. Similarly, it would be highly unwise to retain a computer forensics expert without detailed knowledge regarding data security measures.

Elijah takes data security very seriously. We store all forensic collections in a highly secure environment. Our forensic lab incorporates an electronic access control system that logs all entries by employee, and limits entry to forensic personnel. The lab is further monitored by security cameras, motion detectors and a 24/7 staffed alarm service. For the most sensitive cases that require access only by a specific forensic examiner, Elijah maintains in our lab biometric safes keyed to that investigator’s fingerprints. Hiring Elijah means knowing your data is safely preserved and secured.