FAQ
The specialists answer to you
FAQ : #chain of custody
Feel free to contact us to ask some questions or share a comment.
Forensic data recovery (or digital forensics) is a rigorous technical process that aims not only to recover deleted or hidden data, but also to preserve the chain of custody so that this data is admissible in court.
The main differences with standard data recovery:
| Criterion | Standard Recovery | Forensic Recovery |
|---|---|---|
| Objective | Recover data | Recover + document + certify |
| Footprint on the media | Minimal but undocumented | None (write-blocker cloning) |
| Chain of custody | Not required | Mandatory (MD5/SHA hashing) |
| Report | Optional | Certified report required |
| Judicial value | None | Admissible in court |