Forensic Data Acquisition

Boston-based, serving clients nationwide.

Data365 Evidence provides forensic data acquisition for devices and media, cloud systems, and public website content.

Digital evidence may change or become unavailable before acquisition. Hence, acquisition may precede decisions related to later review.

Acquisition by Source

  • Drives and devices: The client approves the permitted acquisition methods. Data365 Evidence assesses each source and selects the appropriate method.
  • Cloud systems: The client approves the accounts, data scope, and preservation methods. Data365 Evidence assesses each source and selects the appropriate method.
  • Public website content: Data365 Evidence assesses the source and selects the appropriate capture method within the approved scope.

Acquisition Requirements

  • The client approves the scope, preservation methods, and expected deliverables.
  • Written approval is required before adding sources, expanding the scope, or using a preservation or acquisition method that has not been approved.
  • Physical devices and media are handled only as necessary for acquisition.
  • Integrity verification is recorded for acquired images and exports, with known technical limitations documented.
  • Chain-of-custody records are maintained while devices, media, or acquired data remain under Data365’s control.

Matter Records

  • Acquisition record
  • Chain-of-custody record
  • Integrity-verification record

Acquired data and matter records can be delivered to counsel or another designated professional.