ABRAMS COMPUTER FORENSICS
Toll Free:
1-(866)-433-4969
COMPUTER FORENSICS EXAMINERS 
South Carolina

The Digital Detective Agency

Computer Forensics - The search for, and the collection of, evidence from computer systems in a standardized and well-documented manner to maintain its admissibility and probative value in a legal proceeding.

"Forget dumpster diving.  Computers harbor more personal information and secrets than anyone can discard into a 20-gallon trash container. A typical computer holds information people once stored in wallets, cameras, contact lists, calendars, and filing cabinets. Computers are the treasure trove of personal contacts, personal finance, and correspondence.  Practically every investigation - can benefit from the proper analysis of the suspect's computer systems."
  - Incident Response, Investigating Computer Crime, Pg.88

We are expert at extracting evidence from computer systems, and presenting that evidence in clear non-technical language that makes an impact and proves your case.  Steve Abrams has been qualified as an expert in computer software and computer forensics in the South Carolina courts.

For over 20 years, Steve has been one of the pioneers developing and
using computer forensics tools.

Nemo me impune lacessit


 

Steve Abrams, J.D., M.S. has degrees and advanced coursework in computer science and electronics, and more than 20 years experience working with some of the world's largest computer hardware and software manufacturers. He has been a member of the Institute of Electrical and Electronics Engineers (I.E.E.E.) for over 18 years, and is a Licensed Attorney in South Carolina.  He is a member of the South Carolina Association of Legal Investigators, The High Technology Crime Investigation Association, and the South Carolina Bar and the American Bar Association..

Steve was trained in computer forensic examination by Access Data Corporation at the North Carolina Justice Academy.  (Steve earned a certificate in Access Data Computer Forensics from NCJA.)  Steve had advanced Windows forensics training by Access Data Corporation.

Steve also attended the GMU2002 & GMU2003 computer forensics training symposia sponsored by the Regional Computer Forensic Group of the High Technology Crime Investigation Association.  Steve was an instructor at GMU2007.

Steve Abrams & Company Ltd.  has its own fully equipped, state of the art, computer forensics lab in Mount Pleasant, SC. We can travel almost anywhere in the world to collect digital evidence.  We use state of the art ICS and Digital Intelligence write protection devices to capture images of digital evidence from IDE, SATA, and SCSI hard drives

  We use Access Data's FTK and PRTK, EnCase and Linux tools for imaging and analysis. We also have many other software tools for network, email, and Internet investigations.

 

As licensed PI computer forensic examiners, we can:

Make forensic duplicate drive images and document all files on the hard drive and the procedures used to obtain them.
Recover deleted files, and/or files lost when a drive is reformatted, including in file slack space and unused portions of drive.
Recover passwords from most Windows application software, and those used by Windows 9x, Windows NT, and Novell Netware servers.  
Decrypt encrypted data and messages.
Every PC leaves a unique electronic fingerprint on every MS Office document it creates.  We can examine these documents to determine on which machine a document was created, and when and by whom it was created.
Quickly locate and catalog every graphic file on a PC hard drive, and flag child pornographic images using a national database of known images.
Trace and validate email messages stored on the hard drive. With a court order we can get additional information from the internet service provider to help ascertain the source and author of the email.
Document and retrace the Internet sites accessed by the users of the computer being examined.
Locate and identify all "malware" (viruses, worms, Trojans, and other malicious software) on the hard drive.
Find evidence of files left behind by hackers.
Evaluate existing computer security measures, find weaknesses and suggest improvements.

The US DOJ maintains a website with guidelines and case law pertaining to seizing and searching computers.  It's the best place to start putting together a legal case that will use electronic discovery to obtain evidence from a computer system.

The US DOJ website is: http://www.usdoj.gov/criminal/cybercrime/searching.html

They also have a wealth of "cyber-crime" information online at:  http://www.usdoj.gov/criminal/cybercrime/


ABRAMS COMPUTER FORENSICS

Licensed Attorneys
Computer Forensics Examiners

P.O. Box 305, Sullivans Island, SC 29482
  
1-(866)-433-4969
 www.AbramsForensics.com
steve@AbramsForensics.com

© 2008 by ABRAMS COMPUTER FORENSICS

Home Page (Click Here)