Multidisciplinary Approach to Digital Forensics

CyberTrail’s team of investigators includes: digital forensic examiners, digital investigators, traditional private investigators, former law enforcement fraud detectives, forensic accountants, and data analysts. Uncovering evidence of fraud is a challenging task which cannot be adequately addressed by digital examiners alone. With so much information being leaked to cyber space, digital forensic investigations are a critical component of knowledge based discovery. We will help you discover the unknown unknowns about your case.

We Follow Forensic Best Practices and Adhere to the ISFCE Code of Conduct.

Our Certified Computer Examiners will at all times demonstrate commitment, diligence, and professionalism in performance of assigned duties. We follow forensic guidelines to prevent alterations to the original media and we maintain a strict chain of custody throughout the investigation. Any evidence uncovered is carefully documented within a “findings report” and verified with the original in preparation for legal proceedings such as discovery, depositions, or litigation.

Certified Digital Forensic Experts

Our examiners have been certified as digital forensic experts through a minimum of two respected vendor neutral certification bodies such as the International Association of Computer Forensic Examiners.  A vendor neutral certifying body is one which focuses on the fundamental knowledge, skills and processes required for proficiency in digital forensics rather than on a specific tool. Our examiners are additionally certified in at least two vendor sponsored certifications such as those provided by Encase, Access Data and Cellebrite.

There are many companies and government agencies that require their forensic computer examiners to hold the CCE certification in order to obtain or maintain their position. The certification provides a fair, vendor neutral, uncompromised process for certifying the competency of forensic computer examiners based solely on their knowledge and practical skills and abilities.
The CHFI certification validates the examiner’s skills to identify and analyze a wide range of computer crime or misuse, including but not limited to theft of trade secrets, theft of or destruction of intellectual property, and fraud. CHFI investigators can discover data that resides in a computer system and recover deleted, encrypted, or damaged file information.
Advanced level certification designed for technically savvy digital evidence analysts. Demonstrates mastery of the analysis and advanced search techniques using UFED Physical Analyzer to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting. Certification requires passing both knowledge and practical exams preceded by 38 hours of CPA coursework.

We Uncover Evidence other Forensic Investigators Leave Behind

Our firm has the training and experience to go beyond the inherent limitations of the commercial digital forensic software tools. We recover and analyze digital evidence the tools overlook. We accomplish this through the use of custom EnScripts and Python Scripts for use with Encase 7 Forensic and Cellebrite UFED Physical Analyzer. Our coders and examiners recover and analyze evidence faster and more effectively by working together on strategic solutions (custom code) to resolve complex digital forensic problem sets.  This multidisciplinary approach to digital forensics sets us apart in the field and saves our clients money. By utilizing custom code we can get the job done in a fraction of the time it takes to point-and-click our way to the solution.

Expert Witness Training

Our examiners receive expert witness training so that their testimony is simple, helpful and engaging. We are aware that a person can be an excellent expert but make a bad expert witness. Our experts always maintain a professional appearance. They are trained in proper demeanor, gestures, posture and tone. Our experts are taught to avoid taking on an adversarial attitude during cross-examination. This helps to avoid any perception of bias. Our experts avoid posting any statements on social media or other public medium that could raise an issue as to the expert’s credibility or bias.

Affiliations and Memberships

High Technology Crime Investigation Association
Association of Certified Fraud Examiners
International Society of Forensic Computer Examiners
International Association of Computer Investigative Specialists