Forensic Data Reduction

We use computer forensics to reduce a universe of discovery data to a more manageable subset, without overlooking potentially significant data. Forensic images of the data in question are created so the integrity of the original data/ metadata is preserved. We then create custom scripts specific to each matter to weed out duplicate files, machine-created files and other dross. Data reduction may be based on key words, file types, identification (headers/extensions), data patterns, date ranges and metadata values. Our processes do not rely on any one application; we can often process files outside of their native environments, which generally provides greater access to the properties associated with a file.