SRC is able to assess most computer forensic cases including anything from a USB stick to a server.    Sam can review cases involving various types of operating systems, including Windows, macOS/Apple computers, Linux and Unix-based systems.

SRC has access to the latest forensic software and has current licences for the use of Axiom, X-Ways Forensics, Forensic Explorer (including Live View), and Intella as well as other forensic/high level packages.  Sam can also manually review databases and write computer programs where required to process data or undertake analysis that may not be possible using commercial software, or where other analysts/experts have been unable to provide opinions.    She can also validate the data present in your case to ensure the evidence presented is accurate and complete, with the limitations fully explored.

As a digital forensic expert, Sam is concerned with answering questions such as: What happened? How did it occur? Who did it? Where did it happen? She also provides overall opinions relating to the comparison of computer use with allegations and defences.    Sam does not provide data recovery or analyst level services. 

SRC is able to undertake instructions in complex cases involving potential use of WiFi points, routers, and the assignment of IP addresses (and logged MAC addresses).   This may also include evidence that has been gathered via intelligence or otherwise.

Although it may sound reasonable to expect a device to know and log its IP address, in practice, such information is rarely logged, since a device does not need to know this information in order to function.    This means that, although a location-based assessment may examine for this evidence, the information is generally not stored.  In most cases, therefore, other types of evidence need to be considered. 

Network forensics evidence can be technically complex and involve numerous technical terms and acronyms. Sam explains the underlying issues in clear, accessible language while maintaining technical accuracy.

Sam can review network-based evidence independently or combine it with computer device evidence, mobile device evidence, location evidence and cell site analysis.

Sam is also able to take instructions in cases involving identifying and evaluating information available from publicly accessible sources.  This is sometimes technically referred to as Open Source Intelligence (OSINT).

Using such information, Sam can review previous website content, domain name use and registrations,  and IP address use to determine what data may have been stored.

Sam can also review for data stored on the Internet via websites, social media and other platforms.  Such reviews may be useful as part of an assessment of attribution evidence (e.g. where it is necessary to determine potential ownership of telephone numbers, usernames and/or email addresses).   For example, if a person states they do not own a specific mobile telephone number, as well as digital forensics involving devices and CDRs, searches can also be performed to establish if there is any public information stored about the number's use.    This can occur, for example, where a user registers a number with Companies House or uses the number in an advert on social media or other websites.

Note that intelligence services, like all services offered by SRC, are only provided via a legal team as part of an instruction in a legal case.   Sam does not provide any private detective/investigation services to the public or otherwise.

Yes.   SRC has been working in cases with MOUs for over 15 years.   Sam is able to examine computers and devices in accordance with the required level of security specified by UK police force Digital Forensic Units (DFUs).

Sam can also provide in-person collections of data from police forces throughout the UK.

Since 2nd October 2023, computer device forensics is subject to the requirements of the Code of Practice from the Forensic Regulator(388 page PDF Document opened from an external site).   

ISO/IEC 17025 accreditation applies to the forensic organisation/unit and its defined scope of activities; it is not a personal accreditation held by an individual expert witness.

SRC follows strict procedures in terms of securely reviewing mobile and tablet device cases including working to MOUs.   Sam also fully reviews raw data and otherwise to ensure all reports are prepared accurately and are not "push-button" forensics.   However, SRC is currently not ISO17025 accredited and is non-compliant.

A full discussion of this will be provided prior to estimating, and where the instruction is accepted, the required non-compliance declarations made.   SRC can work within the ACPO Guidelines as is appropriate.

Sam receives instructions in cases where there are allegations of hacking.   She can review the technical evidence of such cases.

SRC also undertakes instructions in cases whereby hacking/viruses and/or third party use are part of the defence case.   She will fully review how material has come to reside on a device and provide opinion-based evidence as to whether this may have been caused by a virus, hacker, third party or user-initiated activity, and how.

It is important to note that these cases tend to involve a much more detailed assessment than a simple virus scan.  A conventional virus scan provides only a snapshot of what may be present on a device at the time of examination, it may not establish what was present or occurring during previous relevant use.   Therefore, it is important that such use is considered fully to ensure that the correct assessment is made and that the defence case is fully explored.

SRC is experienced in dealing with a range of materials that are illegal to possess and that require secure procedures and a Memorandum of Understanding (MOU) to be signed with the police.  When funding is granted and the appropriate permissions are in place, Sam can liaise directly with the police to obtain disclosure of this material following the required procedures.

SRC can undertake cases where there are charges relating to terrorism, including articles.   Sam can also deal with the issues and sensitivities involved in rape cases including those that involve minors.

SRC also takes instructions involving alleged indecent images of children, extreme images and prohibited images.   Sam is experienced in reviewing such cases, including assessing the imagery, and is familiar with caselaw and the legal requirements in this area.

SRC can test and consider how applications work in very specific circumstances, including bespoke systems, and compare this with the evidence present within cases, as well as evaluating an organisation's policies and procedures. In the past, this has involved Sam testing and reviewing bespoke hospital, tax, military and police systems as well as systems and security procedures used by large organisations. 

Sam also takes instructions for a range of digital evidence cases involving ‘bespoke’ investigations requiring novel solutions which may not be achievable using commercial forensic software.