Data Preservation

Data Preservation

GK Sierra’s team of trained forensic examiners are among the best in their field.  GK Sierra’s staff has been trained in the best practices of electronic data collection.  From logical collections of native files to bit-stream forensic imaging (aka mirror imaging, hard drive cloning), GK Sierra is experienced in capturing a variety of data types using cutting-edge technologies and industry best practices.

Data preservation can be accomplished by making a valid forensic image using software such as Encase.  The difference between conventionally copying a hard drive and a forensic copy is that a forensic copy is a complete bit-stream copy of the original, including all unallocated spaces where data may be hiding.

Preserving electronically stored information swiftly and as required can help prevent attorneys and their clients from facing sanctions for failing to act promptly to preserve key data.

GK SIerra has collected hundreds of computers in less than one business week.  GK Sierra is able to minimize client downtime and can provide weekend and off hours collection services to clients needing to avoid business disruptions.

Forensic imaging services sometimes can be referred to as:

• Hard Drive Imaging
• Hard Drive or PC Cloning
• Mirror Imaging
• Bitstream Imaging
• Hard Drive Duplication
• Ghosting or Shadowing a Hard Drive
• Forensic Copying

A valid forensic image is one that has been captured and documented by a trained individual. A hash algorithm is used to compare the original and copy to authenticate that a valid image was created.

GK Sierra staff are also adept at managing hostile imaging situations where adverse parties are present and may not want the process to run smoothly.