Digital Forensics
Digital forensics is a division of forensic science encompassing the recovery and investigation of material found in digital devices
Digital Forensics Services Offered:
- Forensic Hardware
- Forensic Software
- Network Forensics
- Password Recovery
- Data Decryption
Computer forensics involves the identification, preservation, extraction, documentation, and analysis of computer data. Computer forensic examiners follow clear, well-defined methodologies and procedures that can be adapted for specific situations.
AGT is specialised in IT security and forensic IT investigation. With more than 5 years of commercial experience, AGT is considered an expert in these fields. Based on this expert reputation, AGT was approached by several governments in MENA region and entrusted to set-up their National Forensic Laboratories. Selection of appropriate hardware and software is the first stage, underpinned by hands-on training and secondline support in the field.
The fundamental principle of computer forensic examination is gathering data from a system (computer or network) without altering the data and the appropriate measures observed to ensure this. Even the act of shutting down a computer for it to be transported will necessarily incur changes to the data contained on the system. It is therefore challenging, and a highly specialised task to gather data without impinging on its integrity. The experienced AGT Computer Forensics Investigators strive to preserve data for clients without intrusion. To ensure the precision of their investigation, an exact copy of the data (an image) is made on a disk which then is the subject of subsequent examination rather than the original data.
Another key concept is recovery of deleted data or parts thereof. When data is deleted, it is not physically wiped in entirety, but rather the reference to the data is removed while the data itself remains available on the system. By imaging all data existent on a hard disc, instead of just the data identified by the operating system, it may be possible to recover data accidentally or purposefully deleted.