Forensic IT | Computer Forensic | Forensic IT Services

Police and other law enforcement agencies have very few persons skilled in the field of internet fraud, email fraud and they are certainly not interested in matters that involve corporate crime, theft of intellectual property, harassment, detection of spyware or data recovery. This is where Lyonswood Investigations and Forensic Group fills that void. The incidence of these types of manifestations in the lives of individuals and companies is far too common and thus the responsibility for solving them is now largely in the domain of the private Sector.

If you are suspicious that you have a disloyal employee, partner or spouse and that they are using information technology to cheat, steal or defraud you then our Forensic I.T. team can assist you to uncover the truth, gather the evidence and get you back on track.

Forensic I.T. and Computer Forensic Private Detective or Private Investigation Services:
» Computer/mobile phone evidence discovered/recovered
» Data recovery
» Email tracing
» I.P. address identification
» Key stroke logging
» Detection of spy software
» ‘EnCase’ trained and certified
» Adolescent due diligence/ At risk children
» Threats, defamation, slander and malicious acts

Our Computer/ I.T. Forensic Team based in our dedicated Forensic Department can competently and skilfully carry out computer forensic examination of your data and protect the integrity of and capture that data in a form that satisfies the requirements of law enforcement agencies and the courts so that the evidence will stand the test of close scrutiny. Our Forensic I.T. Manager is a skilled technician in these matters and has a combined 20 years of computer and information technology experience and qualifications in 'EnCase' software and other associated data recovery and detection techniques. He is regularly up skilling to keep pace with technological changes and advancements in detection techniques and software in the fields of email fraud, internet fraud and mobile phone interception spyware.

EnCase Forensic software is the current industry standard in computer forensic investigation technology. The software alone does not ensure competency and thus ‘EnCase’ certification is paramount.

With an intuitive GUI, superior analytics, enhanced email/Internet support and a powerful scripting engine, EnCase provides certified investigators with a single tool, capable of conducting large-scale and complex investigations from beginning to end. Law enforcement officers, government/corporate investigators and consultants around the world benefit from the power of EnCase Forensic in a way that far exceeds any other forensic solution.

Acquire data in a forensically sound manner using software with an unparalleled record in courts worldwide.
Investigate and analyse multiple platforms — Windows, Linux, AIX, OS X, Solaris and more — using a single tool.
Save days, if not weeks, of analysis time by automating complex and routine tasks with prebuilt EnScript® modules, such as Initialized Case and Event Log analysis.
Find information despite efforts to hide, cloak or delete.
Easily manage large volumes of computer evidence, viewing all relevant files, including "deleted" files, file slack and unallocated space.
Transfer evidence files directly to law enforcement or legal representatives as necessary.
Review options allow non-investigators, such as attorneys, to review evidence with ease.
Reporting options enable quick report preparation.

DATA RECOVERY/MINING

Work stations/notebooks/blackberries/ mobile phones/ I-pods / memory sticks/CF cards

Lost data, data suspected of being copied and transported elsewhere (Stolen data), data that might breach laws, codes of ethics or workplace and privacy guidelines is often sought as a vital piece of evidence required to identify the sender, the person receiving the data or the thief. Today, the act of industrial espionage is mostly carried out via the Internet and it’s big business.

Disloyal employees are regularly committing internet fraud, email fraud and hacking into computers and selling information to your opposition or feathering their own nest by transporting your intellectual property before they jump ship to your competitor.

Lyonswood Investigations and Forensic Group has a good track record of recovering the evidence even though the persons responsible have attempted to cover their tracks. This is where Lyonswood Investigations and Forensic Groups Forensic I.T. specialists have the edge on these fraudsters through skilled professionals with the latest techniques backed up by state of the art software programs. We have many satisfied clients that we have assisted to get their businesses and lives back on track after they have fallen victims to internet fraud and email fraud.

Sometimes the internet fraud issues are simple and others far more complex. Maybe you have lost that very important baby, family or holiday photos through a malfunctioning micro drive or CF card. Lyonswood Investigations and Forensic Group can probably help you retrieve them.

COMPUTER EVIDENCE/EVIDENCE OF INTERNET FRAUD/EMAIL FRAUD/MOBILE PHONE FRAUD DISCOVERED

Recent data from the U.K. and the U.S.A shows a strong trend indicating that victims of internet fraud and email fraud cannot rely upon police to assist them to catch and prosecute the individuals responsible. The Australian experience is no different with Lyonswood Investigations and Forensic Group recently experiencing comments from police that they are 18 months behind in forensic analysis of computer hard drives and just don’t have the resources to bother with internet fraud and email fraud unless it is serious. Just what the police definition of serious means is really not known. I am afraid that even though a huge private sector security industry has grown and much of what police used to do they no longer have to; they are still struggling to carry out their mandate.

A recent survey carried out by Security Software Vendor AVG revealed that Australians have the highest incidence of falling victim to internet fraud and email fraud. A study of 9000 Australian Internet users provided evidence that 39% of Australians had become unwitting victims of internet fraud and email fraud as opposed to 28% Americans.

The Internet is a wonderful tool for making friends, doing business, locating services and generally broadening your general knowledge. However, the Internet is fast becoming the major source of funding for fraudsters and organised criminal gangs.

There seems to be a blind faith by many Internet users that “if it’s on the Internet it must be the truth”. If it sounds too good to be true then it generally isn’t true. The truth and the Internet are sometimes far removed from one another. People/businesses who advertise or promote themselves or their services/products on the Internet do not have to pass the scrutiny that other media forms insist upon. At this point in time, the Internet is open to anyone who wants to use it and publish upon it and mostly with total anonymity. This is why you will at some time require the services of a computer forensics investigator.

Anyone can open an e-mail account without declaring his or her true identity. Anyone can cut and paste details of another or a product and take that identity/product and cleverly convince others that it’s the truth. Today to drive a car, to travel overseas, to open a bank account or to gain employment, the applicant must prove their identity. The most powerful vehicle in the world today is the Internet and anyone can use it and remain totally secretive about who they are or for that matter, where they are. No proof is required to establish an e-mail address. This lack of regulation has now turnedthe Cyber world into the ‘wild west’ where it seems anyone without fear of prosecution commit internet or email fraud.

Lyonswood Investigations computer forensics division has seen a rapid increase in the amount of inquiries it receives from victims of Internet fraud and email fraud. Generally, law enforcement agencies are not interested or just don’t have the resources to assist. Most of these victims have been cleverly and very deviously cheated and convinced that the person they are dealing with or the product/service they wish to buy is genuine. Not all victims are stupid or naïve, many are prominent members of the community and highly intelligent. Internet fraud and email fraud persons are very organised and plan their computer crimes to hide behind a complicated network of bogus identities.

Much of Internet fraud and email fraud goes unreported as the victims, when fully alerted to the consequences of what they have done feel embarrassed and just put it down to a bad experience. Lyonswood believes the percentage of internet and email fraud victims is far greater than the statistics would indicate.

It is this increase in reported Internet fraud that prompted Lyonswood Investigations to create a computer forensics division and surround itself with skilled technicians to assist in the detection of and the location of those responsible. Our forensic technicians are constantly improving their skills and qualifications to keep abreast of developments in detection and deception of internet fraud. It is a never-ending endeavour to keep pace. Much of our computer forensic work is the determining of whether a person/entity is in fact who or what they purport to be. Many of our clients are on the cusp of either doing business or providing important details to another and smell a rat. Many are relieved when their intuitiveness is rewarded by what our investigations reveal.

Almost without exception, internet fraud, email fraud victims that request the services of Lyonswood Investigations and Forensic Group have been to the police in the first instance only to be turned away because of the lack of interest or resources. The time is fast approaching when police will no longer handle such matters. Already the police are out-sourcing much of their work, including forensic work, to the private sector.

Certainly, if you go to the police to have your matter investigated, it costs nothing, provided that they investigate. Not everyone can afford the services of a private investigator/private detective however the major difference between enlisting the police and a private sector investigator is that the only thing preventing a private investigator from pursuing your matter would be your budgetary constraints. Private investigators can devote and dedicate resources to your matter alone and not have to handle dozens of matters at once. The difference in service levels between the public and private sectors are light years apart. The police were once known as the Police Force however political correctness took away the word FORCE and replaced it with SERVICE. I am afraid that in recent years my experience and that of my client base and many others has been that SERVICE is the last consideration of police and believe the name is once again relegated to that old Public Sector status of DEPARTMENT.

In one recent case handled by Lyonswood Investigations and Forensic Group, our clients had two mobile phones, a driver’s license, passport and credit cards stolen from a handbag. The thief was still using the mobile phones and using them to carry out further fraud against the victims. The thief even used the victim’s identity cards to change the numbers. The thief set about replicating their identities and running up bills and making a mess of their lives and financial circumstances. Our client’s days were pre occupied with damage control and attempting to convince banks that they had not personally withdrawn the large sums of cash from their accounts.

They attended police and were told that this was a very common event and that unless they knew the identity of the thief there was little the police could do. Of course this was just rubbish. There was much that they could have done had they have had the motivation and training. The victims attended Lyonswood and we undertook investigations including Forensic examination of the stolen phones data. We soon learned through clever methods the identity and current address of the thief. Our clients took this information to police only to have them declare that they could not use the evidence we had gathered. This was again just further rubbish and further incompetence or just laziness on the part of the police involved. Lyonswood is pursuing this matter with police and hopes to have the police cooperate and arrest the offender.

Lyonswood Investigations and Forensic Group computer forensics division predicted resource shortcomings in this specialised field of Forensic Examination arising out of the internet fraud and email fraud and realised that apart from one or two major very top heavy and expensive firms that were involved in Computer/Information Technology Forensics, there were no other seriously experienced mid-tier companies in this market place. Certainly there were very few that held Private Investigation licenses Recently a new division of Lyonswood, Forensic Information Technology Services (F.I.T.S.) was formed to cater for what we see as being the major avenue for the unscrupulous to commit crime, the Internet. We have enlisted the services of a very skilled and long serving technician to head up this specialised division of Lyonswood Investigations and Forensic Group. His C.V. can be provided to potential clients.

ADOLESCENT DUE DILIGENCE/ AT RISK CHILDREN

Today, children are teethed on computers. Children are using computers before they start schooling and thus become very proficient at using them, quite often even more proficient than their parents. This is where vigilance is required and quite often not able to be provided because the parents are nowhere as savvy as their children and cannot supervise their internet access.

When most parents were children computers were either at their infancy or not even existent. Very devious and clever criminals including those who might want to hurt your child or sexually abuse that child trawl the internet pretending to be comparative age group piers and deceive these young people into all sorts of very dangerous behaviour including but not limited to, disclosing their address, school, times when their parents won’t be at home or away on leave and even sending photos of themselves and even naked.

If you have reason to suspect your child might be exposed to one of these practices or perhaps require software to minimise exposure to these risks, Lyonswood can assist you to have peace of mind.

E-MAIL TRACING

One of the most commonly sought after services in the computer forensics field is the identification of the source or the sender of an e-mail. This is because although a computer is the most dangerous vehicle anyone gets to drive, you don’t need a license to drive it, nor do you need positive identification to open an e-mail account or a website. This allows people who want to harrass, defame and defraud, a perfect vehicle from which total anonimity can be gained, the internet. Or at least that’s what most of these liars, cheats and frauds believe. A skilled computer forensics technician has the knowhow, technology and qualifications to use state of the art software and tecniques to discover the Internet Service Provider (ISP) and the identites behind those communications.

We cannot guarantee that we will discover the identities in all cases as some are able to hide behind the identities of others or false names and addresses however in the majority of cases we are successful.

IDENTIFYING A FRAUDSTER OR ORIGINS OF A THREAT VIA AN EMAIL ADDRESS

Lyonswoods technicians are trained in the latest techniques and the use of state of the art software developed to discover the threads of evidence and imprints that these fraudsters leave behind. One of the tools we use is the software product ‘Encase’.

EnCase Forensic software is the current industry standard in computer forensic investigation technology.

With an intuitive GUI, superior analytics, enhanced email/Internet support and a powerful scripting engine, EnCase provides investigators with a single tool, capable of conducting large-scale and complex investigations from beginning to end. Law enforcement officers, government/corporate investigators and consultants around the world benefit from the power of EnCase Forensic in a way that far exceeds any other forensic solution.

Acquire data in a forensically sound manner using software with an unparalleled record in courts worldwide.
Investigate and analyse multiple platforms — Windows, Linux, AIX, OS X, Solaris and more — using a single tool.
Save days, if not weeks, of analysis time by automating complex and routine tasks with prebuilt EnScript® modules, such as Initialized Case and Event Log analysis.
Find information despite efforts to hide, cloak or delete.
Easily manage large volumes of computer evidence, viewing all relevant files, including "deleted" files, file slack and unallocated space.
Transfer evidence files directly to law enforcement or legal representatives as necessary.
Review options allow non-investigators, such as attorneys, to review evidence with ease.
Reporting options enable quick report preparation.

THREATS, DEFAMATION/ SLANDER & MALICIOUS ACTS

Today, with great ease, anyone can open an e-mail account or set up a website with total anonymity. The most powerful vehicle in the world today is not a V12 sports car, it’s the Internet and you don’t have to prove whom you are to get on board and drive it. Devious, nasty and greedy people use it every day to take revenge and manifest themselves in people’s lives in a threatening, slanderous and malicious manner and perpetrate internet and email fraud.

Lyonswood Investigations and Forensic Group receive inquiries every week relating to unknown e-mail senders making threats. There are ways to discover the identity of the person making the threats.

I.P. ADDRESS SOURCE IDENTIFICATION

One of the most commonly sought after services in the computer forensics field is the identification of the source or the sender of an e-mail fraudster or malicious communicator. This is because although a computer is the most dangerous vehicle anyone gets to drive, you don’t need a license to drive it, nor do you need positive identification to open an e-mail account or a website. This allows people who want to harrass, defame and defraud, a perfect vehicle from which total anonimity can be gained, the internet. Or at least that’s what most of these liars, cheats and frauds believe. A skilled computer forensics technician has the know how, technology and qualifications to use state of the art software and tecniques to discover the Internet Service Provider (ISP) and the identites behind those communications.

KEY STROKE LOGGING

Key Stroke Logging is a term used to describe software used to either overtly or covertly monitor the key strokes entered into a computer and to transport those key strokes to another address or computer so that they might be monitored. There are legal reasons and legal remedies to allow such covert monitoring, particularly in matters where the safety of minors is at risk and in workplaces where it is suspected that unlawful activities such as the theft of intellectual property or slander and harrassment is taking place.

If you either need to install this spyware or perhaps believe you are a victim of an unlawful installation please don’t e-mail us from that computer and make contact either from a secure phone of other computer.

DETECTION OF SPYWARE

The more sinister side to key stroke logging is that of illegal or illegally installed spyware. This spyware can now be sent within an e-mail as a hidden attachment that quickly secrets itself into your hard drive and remains there undetectable stealthily stealy your every communication, document and website visited. Law enforcement agencies use these spy devices to trap criminals. It caan also be installed on your computer by ohers who may have access and despite you having sophisticated spyware detection software on your computer, this spyware remains undetected.

If you either need to install this computer forensics spyware or perhaps believe you are a victim of an unlawful installation please don’t e-mail us from that computer and make contact either from a secure phone of other computer.

Why should we choose Lyonswood Investigations and Forensic Group’s Forensic I.T. Services Division to examine our computers?

We have years of experience not only in the recovery of computer data, computer forensics, and computerfraud email related invesitgation. Our clients include corporations of all sizes, as well as private individuals.

We regularly provide expert testimony concerning computer forensic examinations. We provide support to law enforcement agencies in the investigation of crimes and computer forensics.

Our senior technician has a combined experience in electronics and computer technician/ computer forensics work/investigations of over 20 years which is unheard of in this very new field. If it is important enough to use computer forensics, it is critical to use someone with 20 years of hindsight not only in the field of computer forensics but in the fields of computer software and hardware as well.

You're in New South Wales wouldn't it be cheaper to get someone who is local?

We have clients throughout Australia. Most of our cases never require any travel; the client ships the hard drive(s) to us.

The most important factor in selecting a computer forensic examiner shouldn't be geography. There are a very limited number of truly qualified firms across Australia in the computer forensics field. Many of the major cities in Australia don't have any qualified individuals in the private sector.

Hiring a well qualified and broad based computer examiner may cost more initially, but is there any value in an incomplete examination? Only the best examiners can provide thorough computer forensics examination and interpretation.

We have computer personnel in our company, why shouldn't we let them conduct the examination?

Although they may have a considerable amount of knowledge and experience with computers, perhaps even data recovery, it is highly unlikely that they have the requisite knowledge of the computer forensic protocols that must be observed to find all of the evidence, protect the data, and ensure the admissibility of evidence in civil or criminal trials. We take steps to safeguard the computer data; these steps require specialized training, hardware, and software. We have the training, experience, and tools to conduct a thorough examination of computer data and are able to interpret what we find.

In addition to the lack of skills, hardware and software, using a company employee can open you up to allegations of fabricating evidence and other impropriety. We are an independent firm and integrity is the keystone of our company.

Can your employee qualify in court as an expert in the computer forensic examination of a computer? Probably not. Assuming their findings were not suppressed, they would only be allowed to testify to facts. They would not be allowed to testify to opinions or conclusions. Our expertise has already been recognised by law enforcement agencies and the courts.

We often receive computers to examine after a company's computer personnel have attempted to recover evidence from them. In their attempts they have destroyed important computer forensics evidence such as the date that files were last accessed. The computer forensic processes and hardware that we utilise are designed to safeguard every bit of evidence.

We don't plan on going to court. We're just looking for what and why an employee has been utilising a computer. Isn't it ok to use in-house computer personnel to do this?

If your concerns are strong enough to warrant the examination of a computer, then it is important to do it right. If the employee is fired or disciplined as a result of the examination, civil litigation will likely follow. We can provide you with the documentation and expert testimony that is necessary to substantiate your actions. Our vast experience allows us to not only find the evidence, but to interpret its meaning.

Can we use a data recovery firm for doing computer forensics?
Most data recovery firms do not have forensically qualified technicians. While some of the same skills and software are used in both computer forensics and data recovery, computer forensics requires extensive additional knowledge and experience. Remember, a forensic examiner is not only finding the data, but is also providing expert analysis/testimony of what they find. This expert opinion must be capable of standing up under intensive cross-examination in courts of law. You also need to know the qualifications of the person(s) that will actually perform the examination rather than the collective qualifications of all of the examiners at the company. When it comes time for testimony, the individual examiner's qualifications, not the company's, will be under scrutiny.

We already have a relationship with a major accounting firm that says they can do computer forensics. Why can't they examine computers for us?

There are some excellent forensic examiners working for the major accounting firms. There are also some unqualified individuals being passed off as qualified. As with a data recovery firm or any other firm, the qualifications of every individual that will be involved in your case must be known in advance.

What qualifications should we look for in a computer forensic examiner?

There is an ever increasing number of people hanging out their shingle as computer forensic examiners/experts. Some are among the most qualified individuals in the country; others are opportunists, lacking expertise, who believe they can make fast money. Some factors to consider include:

How long has the examiner been doing computer forensic examinations and how many have they done? If your situation is important enough to require computer forensics, it is important enough to not entrust it to someone who has just taken a course or two and has very little practical experience.
Is the person a former law enforcement, government, or military technician? (Note: not just a former member of one of those organisations, but someone that actually did examinations for the organisation.) The best forensic training was historically only available to these groups. Examiners in this group have been trained in proper evidence handling and documentation. They are accustomed to operating at a proof level of beyond a reasonable doubt.
While computer forensics requires the ability to think logically, it also requires investigative instincts. Examiners that are former law enforcement investigators or who have worked with investigation agencies have honed these skills. An examiner that does not have an investigative background may think logically, but probably lacks the investigative instincts.
Can the examiner provide references provided by attorneys as to their testifying abilities?
Another issue is the forensic processing software used by the examiner. Some firms are using dated analysis methods that result in their examinations taking significantly more time than firms using state of the art methods. Greater examination times mean far greater costs to the client.
Is the technician certified and accepted by the legal system and courts as an expert witness.

What does it cost?

We charge between $330/hour plus GST and $440/hour plus GST for forensic analysis and require a retainer for ordinary cases (a single PC or Mac with an 80 gigabyte hard drive). An average examination generally takes a minimum of 10 hours, though this can vary greatly for any given situation. Factors that affect the amount of time required include: the amount of data to search (i.e.: hard drive size, number of CD's, etc.); volume of material; encryption; data hiding; and attempts at destroying the data. Call us for more details; there is no charge for the initial consultation.

Why do you require a non-refundable retainer?

We are often asked to perform less than a complete analysis or to limit our hours in an effort to minimize the cost. We cannot honor these requests because we will not conduct less than a thorough analysis. Doing so shortchanges the client: all of the evidence sought is not found because insufficient time is allocated to the examination. It also places our reputation in jeopardy: if we do not find evidence that is present, it reflects poorly on us, even though our client asked us to limit our hours.

In our experience, thorough examination of a computer is going to take at least 10 hours. If the potential client is not willing or able to invest this minimum amount, we are probably not the correct firm for them.

phone

If you need a Private Investigator or Private Detective service that is beyond reproach contact
1300 GET PROOF (1300 438 776) or e-mail us for an obligation-free initial consultation now.

CAPI (Private Investigator) License No. 409413353

An investigator will assess your matter and respond promptly.