Notes
Outline
California Data Recovery, Inc.
The Bit-Chasers
(916) 825-2220
What we do
California Data Recovery, Inc. specializes in Computer Forensics and Data Recovery.
Data Recovery
Minimize Damage to data stored on damaged hard drives.
Desktop Computers
Laptop Computers
Servers
Computer Forensics
Useful when dealing with
Personnel Actions
Civil Litigation / Electronic Discovery
Criminal Investigations
Other
When can we help?
Discovery Requests
Sexual Harassment
Embezzlement
Personal Business on Company Time
Pornography
Internet Abuse
Unauthorized Access of Resources
What can we find?
E-Mail and Internet artifacts
Accounting Files Etc.
Documents
Logon/Logoff History
Recovery of graphic files
Chat Room History
What can we Analyze?
Cell Phones, Palm Pilots, and PDA’s
Desktops, Laptops, Servers
Flash Memory Sticks
CD ROM, DVD ROM
Digital Cameras
The Process
Image the Drive
Forensically sound image of hard drive
Can be done on or off site
Process Evidence
Analyze drive image
Report
Provide Detailed Reports in Word and HTML
Testify
Testify in court to our findings
Identification and Preservation of Evidence
Identification of potential sources of evidence.
Servers, Laptops, Desktops, Cell Phones, etc.
Preservation of Evidence
Make exact copies of electronic media through a process known as imaging.
Special process called hashing grantee's image is exact copy.
Can be analyzed at a later time.
E-Mail 
Can be located using keywords and email addresses
----- Original Message -----
From: " : <SherrieTwist”> Stwist@plaintiffscompany.com>
To: “Bob Booth<“Bbooth@defendantscompany.com>
Sent: Wednesday, April 14, 2004 7:40 AM
Subject: Our first contract…
Bob, Attached is a copy of the bid package we are submitting for the
front street project.  You should win the bid if you come in 3% under our company.  I’m turning in my resignation as soon as the bid is awarded to you.
I’m really looking forward to working for you.
Thanks, Sherrie
Internet History
Date Time
Find who was logged on at the time
Website Address
Discover if visit to site was momentary or repetitious
California Data Recovery, Inc.
www.CaDataRecovery.com
(916)825-2220