SERVICES
Digital Forensics and Data Collection
On The Record eDiscovery Services provides defensible digital forensics and data collection services to support civil, criminal, and regulatory matters.
We collect, preserve, and document electronically stored information from a wide range of sources while maintaining proper chain of custody and evidentiary integrity. Our approach ensures data is defensibly acquired and ready for downstream processing, review, and production.
Data sources may include:
✔️ Computers and laptops
✔️ Servers and network storage
✔️ Mobile and handheld devices
✔️ Email systems and file shares
✔️ Cloud and hybrid environments
DEFENSIBLE METHODOLOGY
Industry-Accepted Standards
All collections are performed using established forensic methodologies and industry-accepted tools to support admissibility and defensibility.
Cellphone and Computer Forensics
Preserve the evidence. Understand the facts. Prepare your case.
On the Record e-Discovery Services helps attorneys, businesses, and government agencies collect, preserve, and analyze digital evidence. From cellphone messages to computer activity, we turn electronic information into organized, understandable evidence for litigation and investigations.
Cellphone and Mobile Device Services
- iPhone and Android Collections — Preserve available device data using forensic collection methods appropriate to the device and scope of the matter.
- Text Messages and Chat Applications — Collect and analyze available SMS, MMS, iMessage, WhatsApp, and other supported messaging data, including attachments.
- Photos, Videos, and Attachments — Examine media files and available metadata to identify information relevant to your case.
- Call Logs, Contacts, and Device Activity — Review available records to help establish communications, relationships, and timelines.
- Deleted Data Recovery — Evaluate and attempt recovery of deleted messages, files, and other artifacts when technically possible.
- Location and Mobile Records Analysis — Examine available device location artifacts and carrier records to help reconstruct relevant events.
- Mobile Backup Analysis — Collect and examine accessible device backups for relevant communications and other evidence.
Computer and Storage Device Services
- Forensic Imaging and Preservation — Create forensic images or targeted collections from supported computers, hard drives, USB drives, and other storage media.
- Windows and Mac Examinations — Analyze available files, system artifacts, and user activity relevant to the investigation.
- Email and Document Collections — Preserve relevant emails, attachments, business records, and associated metadata.
- Deleted File Recovery — Attempt recovery of deleted documents and other recoverable data.
- USB and File Transfer Analysis — Examine artifacts that may indicate external device connections, file copying, or transfers.
- Internet and Download History — Review available browser history, downloads, and related activity.
- Employee Departure and Data Misuse Investigations — Investigate potential unauthorized access, removal of confidential information, or deletion of company records.
Evidence Analysis and Litigation Support
Support may include:
✔️ Event Timelines — Organize communications, file activity, and other artifacts into clear chronological reports.
✔️ Forensic Reports — Document collection methods, examination findings, and relevant technical limitations.
✔️ Chain of Custody — Maintain records of evidence handling, transfers, and preservation.
✔️ Attorney Consultation — Help counsel define collection scope, identify relevant sources, and understand technical findings.
✔️ Deposition and Expert Testimony Support — Explain forensic methods and findings in connection with legal proceedings.
✔️ eDiscovery Review and Production — Prepare collected evidence for searching, review, and production through iCONECT or other supported platforms.
Ready to Discuss Your Matter?
We tailor each engagement to the relevant devices, custodians, date ranges, and evidence sources. Targeted collections can help control costs and limit the collection of unrelated personal information.
Available data and recovery options depend on device condition, security settings, software version, application support, and authorized access.