Caution - Please read this before going any further.

Whether you decide to utilize our services or the services of another company, protect the questioned data from any further access or use.

Any use or access of the data on a drive after the event that requires a forensic examination may spoil any evidence recovered. This access could lead to the accusation that you planted the evidence or you accidentally overwrote the evidence that would clear the suspect.

You should do the following until a qualified examiner looks at your computer:

• Unplug the computer.
• Store it in a locked secure location.
• Do not let an untrained person examine the computer.
• Do not remove the hard drive and put it into another computer as a second drive so that you can look at it. This action will cause writes to the hard drive.