Forensic Services

Chill IT offers a range of forensic computer services that includes:

  • Expert Witness Services.
  • Forensic Computer Examinations
  • Computer Data Forensic Analysis
  • Lost Data Recovery
  • Hidden Data Recovery
  • "Exact" Copies of Hard Disks and Computer Media
  • Unlocking Passwords and Lost Password Recovery
  • Digital Discovery for Law Firms and Litigation
  • Data Authentication
  • Data Format Conversion
  • "Suspect Employee" Internal Corporate Inquiries
  • E-mail Trace Route Analysis (E-mail Tracing)
  • "Trojan Horse" Hijacked Computer Analysis
  • Deleted E-mail and Instant Message Chat recovery
  • File sharing analysis
  • ICQ / AOL Instant Message / Yahoo / MSN6 and similar instant message chat recovery and analysis
  • Internet History and Web Surfing Activity Analysis
  • Data Recovery
  • Wipe ("sterilize") old hard drives to DOD Standards
  • Computer Registry Analysis

    • And much, much more.

    Chill IT serves the following kinds of clients:

  • Law Firms
  • Accountants, Fraud Examiners and Auditors
  • Businesses and Corporations
  • Law Enforcement, Police Agencies and Prosecutors
  • Courts and the Judiciary
  • Private Investigators
  • Insurance Companies
  • Victims of Computer Crimes or Torts
  • Students or others suffering data loss

    • Fees:
    Our fees are based upon the sort of work we are doing. It largely depends on the operating system, the difficulty of the examination or recovery, and whether court testimony may be necessary. This rate will be determined and quoted before any limited or complete examination begins.

    We offer four types of examinations: (1) a preliminary evaluation to determine whether further examination is advisable, (2) an intermediate, limited examination of 10 to 20 hours for finding specific items of interest to the client (the time may increase or decrease based on the operating system, hardware difficulties encountered, multiple hard drives encountered, the number of floppies or other media to be examined, password or encryption problems to be resolved, the type of data encountered, or other specific examination requirements made by the client), (3) a complete examination of up to 35 billable hours (which may increase or decrease for reasons similar to those mentioned above), and (4) a complete data audit/digital autopsy of the hard drive or other media. (A complete data audit or digital autopsy identifies and catalogues every existing type of data on a hard disk drive and presents a detailed and exhaustive report to the client or to the courts.)