Court-appointed computer forensic and IT examination

When a court-appointed examination is ordered

A court orders a computer forensic or IT examination when establishing case circumstances requires specialist knowledge of software, digital data, websites, applications, databases, computer equipment or network infrastructure.

Materials that may be examined

• court order and case materials;
• contracts, technical specifications, detailed technical specifications, acceptance certificates and correspondence;
• software, websites, applications, source code and repositories;
• databases, SQL exports, event logs and other logs;
• computers, servers, storage devices and other technical devices.

Sample questions

• Does the software product meet the contract and technical specification requirements?
• Does the examination subject have the alleged shortcomings, and what are their technical causes?
• Which actions and events are reflected in logs, databases or digital files?
• Is the object provided functional, and can it be used for its intended purpose?

How we work

Before an examination is ordered, proposals may be prepared on question wording, required materials and technical examination conditions. After the court order is received, the examination is conducted within the questions raised and objects provided.

Result

The result is an expert report describing the materials, methods, examination process, technical facts established and answers to the court's questions.