Legal Case Study - Contractual dispute - On-site computer data extraction

The following is an anonymised case study based on a real assignment conducted by CCL-Forensics for a Law Firm

CCL-Forensics was asked to attend a law firm's premises at short notice, to extract data from a client's external hard drive as part of a contractual dispute.

The analyst quickly arrived on-site, and started the process of forensic imaging.  This meant that data was extracted from the hard drive without any changes being made to the original media.  Due to the large volume of data on the drive, this took a number of hours - during which time the analyst provided consultancy advice of where further data and evidence may be located.

Once imaged, the data was indexed which meant the solicitors had easy access to the data in a manageable form.  This data subsequently formed a significant part of the case, and CCL-Forensics' analyst kept in close contact with the law firm to ensure the potential of the evidence was maximised.