G-FORCE Investigations helps employers and legal professionals uncover computer-based evidence that is incontestable during litigation, such as helping many employers find the evidence they need to expose computer crime including theft of company confidential data, fraud, harassment, breach of trust and inappropriate computer use in the workplace.
 
Recent high profile cases have shown how e-mails or deleted files found as evidence can be the deciding factor in a trial. It can also make the difference in an internal situation where lack of hard evidence prevents an employer from acting, even when he knows an employee is up to no good.
 
Every action on a computer leaves a trace. The objective of the cybercrime investigation is to dig deep into the lowest level of a computer disk, revealing detailed information of computer activities including deleted work files and emails.

• Cybercrime investigations involves the collection, preservation, analysis and presentation of computer-related evidence utilising secure, controlled methodologies and auditable procedures.
  
• A vital aspect of the science of cybercrime investigations is the fact that any use of a PC almost invariably causes information to be saved to the hard disk relating to every user session carried out.
  
• In forensic terms, for every user interaction with a PC there will always be data left behind on that PC relating to the actions carried out.
  
• It should be noted that data is rarely completely eliminated from a hard disk, even after processes involving deletion, defragging, disk formatting or operating system installation. This has important implications during the discovery phase of litigation.
  
• Such evidence is compiled on the assumption that skilled professionals will contest it in court, although solutions outside the Court might ultimately occur.
  
• The object of any computer forensic investigation is to obtain incontestable, factual evidence.

How we help legal professionals:

G-FORCE Cybercrime Investigations apply Information Technology-based knowledge and skills, particularly those of data recovery, to the task of obtaining PC-based evidence. 

• Safe evidential acquisition, preservation and analysis of computer systems and files whilst avoiding alteration of critical data, consistent with the principles of the law of evidence.
  
• Investigation and analysis of data (both visible and deleted) associated with Civil Litigation.
  
• Electronic media discovery
  
• Intellectual Property theft analysis including Company confidential, sales/marketing and financial software use.

Common scenarios include...

• Fraud and embezzlement by employees
• Deliberately deleted data
• Database stolen by an employee leaving to set up in competition
• Inappropriate use of PC by an employee, including Internet pornography