Data Removal & Certification

Forensicon has occasionally been ordered by the court or requested by adverse parties to perform what is called data removal & certification, which involves deleting electronic property from one party’s networks and certifying its removal to the court. Typically this includes additional inspections at points six months and one year from the time of original certification.

Forensicon’s examiners work on-site inspecting all storage devices defined by the court order, and stay on-site until it is determined that all specified data has been deleted. The certification process satisfies both parties and dismisses the case.

Forensicon employs a number of examination techniques to locate files of interest including:

• File name comparisons
• Hash value comparisons
• Link file examinations
• INFO/INFO2 record comparisons
• USB Device References in the Registry
• Keyword searching for derivatives of files

Our experience in tracking the misappropriation of trade secrets will help to ensure that any data taken from your company has been removed and returned,  call Forensicon today at 888-427-5667 for a complimentary telephone consultation or contact us.