Examining images for digital manipulation.

Our forensic team can examine any image file to find and report on
whether that file has been digitally manipulated to cloak evidence.
We provide litigation support where photographic evidence is crucial.

PROTECT YOUR DATA

Find out how you can keep your data secure. Call us on +44(0) 29 2010 0982 for advice on how to protect your vital data.

GET IN TOUCH

Computer Forensics

Mobile Phone Forensics

Cyber Security

IT Protection

Cyber Essentials

Penetration Testing

GDPR

Forensic Data Recovery

E-Discovery

Expert Witness

Extracting meta data from digital photographs and identifying digital manipulation.

Digital photographic forensics or image analysis is the interrogation of digital images to extract meaningful information from images; mainly from digital images by means of digital image processing techniques.

Forensic analysis allows us to compile reports to support criminal or civil claims, where photographs are critical evidence. We use a number of techniques to interrogate digital images.

We are specialists in photographic and image forensic analysis from any digital media or online portal. Using the latest in photoshop forensics, image error level analysis data recovery tools and forensic software, we can determine when an image was created, accessed or manipulated. Using a variety of image analysis techniques, we can examine meta data, pixel aspect ratios and error levels to extract particular information from digital and printed images, CCTV recordings, technical illustrations, photographs, animations and video, even where attempts have been make to cloak evidence.

Our work is primarily of use to legal services, in support of a criminal claim, civil claim or simply an HR issue. We comply with the strict guidelines imposed by the Association of Chief Police Officers (ACPO) and Electronic Evidence Procedures. Our image analysis reports are admissible in legal hearings and we often act as expert witness.

Forensic Investigation Preparation

"We begin by establishing the purpose of the computer forensics investigation, and identifying the best way to preserve and analyse the data we find. Ultimately this will determine what tools, techniques and software we will be required to utilise. At all times we are mindful of any safety measures seeded in the computer, including failsafes that have been put in place to erase the data when triggered"

Data Acquisition

"Once we have established the nature of the investigation, we will begin the acquisition of the data. For this we need to create a duplicate of the media, typically by using a write blocker. This provides our specialists with a snapshot or mirror image of the data contained on the media, and is a perfect copy of the drive. The imaging process is non-destructive to the data, which ensures the integrity of the investigation"

Examination and Analysis

"After acquisition the contents of the image files are analysed to identify evidence that either supports or contradicts a theory, hypothesis, allegation or claim. We will also look at any attempts to delete or hide data, including any failsafes that have been put in place. We utilise a wide variety of forensic tools for examining and analysing data including Access Data and Forensic ToolKit"

Forensic Toolkit (FTK)

"Forensic Toolkit is a court-cited digital investigations platform that is used for computer forensics examination and analysis. FTK is database driven, meaning it is fast and resilient, and allows our specialists to handle massive data sets. The software also allows our specialists to correlate massive data sets from different sources (like mobile devices and cloud storage), allowing us to review data and identify relevant evidence"

Forensic Report

"Once the data analysis is complete, our specialists will compile a detailed report with the findings of the investigation. Our easy to understand report will include notes taken by the specialist in charge of the particular case, details of the hardware examined, the procedures and software used in the examination and any evidence or findings found"

We fully comply with industry standard guidelines

"Our computer forensics procedures are recognised by The Association of Chief Police Officers (ACPO and Civil Procedure Rules (CPR) Part 35 and have been accredited by ISO9001. We pride ourselves on our professionalism and integrity, and have worked on over 600 cases since we were established in 1996"

The Association of Chief Police Officers (ACPO)

"Our specialists always refer to the ACPO guidelines for electronic evidence. ACPO publish guidelines for handling electronic evidence, and it is of vital importance that these are strictly adhered to when investigating computers or digital media. Law enforcement agencies or their agents should never access the media directly, and must always use a write blocker to interrogate media"

We maintain a full audit at all times

"Adhering to the ACPO guidelines, an audit trail or other record of all processes applied to computer based electronic evidence should be created and preserved. Our audits are thorough, so that any other party should be able to examine those exact processes and achieve the same result"

ISO9001 accreditation

"Robust information security is of vital importance, with a diverse range of clients entrusting their sensitive data to us. ISO 9001 is an internationally recognised framework for information security. It helps us identify any risks to important information so we can put in place the appropriate controls to help reduce the risk. Our certifications mean that we can offer our assurance of the quality we deliver"

PAGES

Home
About
Services
Insights
Sectors
Contact
Cookies Policy
Privacy Policy

SERVICES

Computer Forensics
Cyber Essentials
Cyber Security
Data Security
GDPR
IT Protection
Penetration Testing
Mobile Phone Forensics
Image Analysis
Forensic Data Recovery
E Discovery
Expert Witness

GET IN TOUCH

The Lab, 5 Stangate House, Stanwell Road, Penarth, Cardiff CF64 2AA

tel: 02920 100982
email: service@datarecoveryspecialists.co.uk

Copyright © Xcina 2018 | 22 Great James Street, London, WC1N 3ES, United Kingdom
Xcina comprises Xcina ltd. (Company Number 10835789), Xcina Consulting ltd. (Company Number 10857115) and Xcina Enterprise ltd. (Company Number 11331923

Website by IT Pie – web design Cardiff