Bates Investigations: Private Investigators in Austin and San Antonio Central Texas
Bates Investigations   Services    History   Rates    Affiliations   Contact Bates Investigations

Investigative Services: Computer Forensics

Bates Investigations has been working with one of the country's leading Computer Forensics Investigators (Qualifications) since 2001 and has fine-tuned the chain of custody, acquisition and analysis processes. This service will allow us to provide our clients the ability to find hidden or deleted data on computer hard drives.

Bates Investigations has received requests of this type of data recovery and analysis from firms specializing in family law, corporate litigation, personal injury, and even bankruptcy. We will be happy to work with any of our clients in regards to providing this computer forensic service and can personally attest to the extreme value of information that can be obtained (in most cases) from computer records.

Below are answers to often asked question about computer forensics:

How long does it take to acquire the data from the hard drive?
How long does it take to analyze the data once acquired?
What types of data are recoverable?
Does anything that you do in the process of acquiring the data change my hard drive?
On average, how much does an acquisition and analysis cost?
Does Bates Investigations do criminal computer forensics investigations?
What are your qualifications?


How long does it take to "forensically copy" the data from the hard drive?
An acquisition can take as little as 3 hours to as much as several days, depending on the size, type, location of the media to be acquired and the acquisition method required. This procedure is best performed in our office but can be performed "in the field" if absolutely necessary. Bates investigations can provided an estimate of the cost upon consultation.

How long does it take to analyze the data once acquired?
The initial evaluation and obtaining of general information from the "forensically copied" source will require approximately 30 hours of the investigator's time.

What types of data are recoverable?
Types of information (which can be recovered) will vary from case to case but the most frequent information requested is related to deleted email messages, financial records or encrypted documents.

It may be possible to recover chat conversations but it is really a hit or miss. Unless the user has activated logging, all chat takes place in RAM (random access memory). Chat is written to the disk when Windows swaps RAM to disk, due to multi-tasking. Because modern computers have such large amounts of Ram now days, the "swapping to disks" does not always occur. It depends on what programs the user has running in the machine and how many at the same time.

Return to the top of the page.

Does anything that you do in the process of acquiring the data change my hard drive?
There is no damage or alteration of any of the information contained on the original "target" source and all analysis is performed on the copied disk.

On average, how much does an acquisition and analysis cost?
The acquisition and initial analysis of data costs typically start at $3,000.00 but costs can increase significantly if an extremely large amount of material must be reviewed.

Does Bates Investigations do criminal computer forensics investigations?
No. We are aware that it is possible for illegal data (e.g. child pornography) to be discovered during the analysis of a hard drive. If this occurs the service we have provided up to that point is free and you will not be billed for anything other than incidental expenses that may have accrued. Our forensic examiner is a full time Police Detective and should data be encountered which appears to be illegal, those findings will be reported to the appropriate Law Enforcement agency with jurisdiction.

Return to the top of the page.

Qualifications and Training Record

Bates Investigations is trained in data acquisition and our firm has developed a close working relationship with a local computer forensics company that we believe is capable of providing the most competent, complete and credible results for these types of data analysis. The following are the qualifications and training record of the owner of this business:

Qualifications:
  • Certified Computer Forensic Examiner (CFCE)
  • Encase Certified Examiner (EnCE)
  • Seized Computer Evidence Recovery Specialist (SCERS)
  • Data Recovery Specialist
  • Police Detective
  • Police Computer Forensic Examiner
  • Court Appointed Computer Forensics Expert
Training Record:
  • National White Collar Crime Center Windows Client Email Data Structures
  • AccessData Windows Forensics
  • Encase Advanced Internet Examinations
  • AccessData BootCamp
  • Encase Field Intelligence Model / Live Network Investigations
  • Encase NTFS Windows Networking and Artifacts & File System
  • NW3C Instructor Development Program
  • Guidance Software - NTFS Artifacts and File System
  • Guidance Software - Windows Networking Investigation
  • Teaches a Use of EnCase Course
  • Teaches an EnCase Methodology of Computer Forensics Course
    (as a part time trainer for Guidance Software)
  • Encase Advanced Computer Forensics Course
  • Encase Intermediate Computer Forensics Course
  • Seized Computer Evidence Recovery Specialist
  • IACIS Advanced Seizures and Processing
  • IACIS Forensic Network Essentials Training
  • Veridian Macintosh Forensic Boot Camp
  • NW3C Advanced Data Recovery and Analysis
  • NW3C Basic Data Recover and Analysis
Return to the top of the page.

Investigation Services

HOME | SERVICES | HISTORY | RATES | AFFILIATIONS | CONTACT
2003 - 2014 Bates Investigations. Inc. | License No. A05481 | Policies
| (512) 502-1111