Forensic Computer Expert

A litigation expert and consultant in the field of computer forensics. The steps taken by a forensics expert can include: 1) protecting a subject computer system during the forensic examination from any possible alteration, damage, data corruption, or virus introduction; 2) discovering all files (normal files, deleted yet remaining files, hidden files, password-protected files, and encrypted files), recovery of deleted files; 3) discovery of hidden files, 4) access to protected or encrypted files; 5) analysis of unallocated' and 'slack' space on a disk; 6) preparation of an analysis of a subject computer; 7) expert consultation; and 8) testimony at trial.