| In the rapid growth of the Data Forensics field we | | | | licensed as a private investigator without |
| see a number of "wanna-be's" entering the arena | | | | extensive computer knowledge because as a |
| daily. Private investigation firms claim they have | | | | computer forensic expert you are expected to |
| sufficient computer knowledge to conduct | | | | be able to offer expert computer advice and |
| computer investigations. Data recovery companies | | | | have the understanding of how data is stored, |
| claim they can investigate unlicensed and present | | | | collected, sent and copied. |
| eDiscovery documents in court. Be careful here... | | | | Finally, the third requirement is to have |
| not every geek in town who has data recovery | | | | investigative knowledge, background and |
| experience, is an experienced investigator and not | | | | experience. Most private investigators need to |
| every Private Investigator knows how to search | | | | have at least 10,500 hours of investigation |
| all the different allocations of the hard drive or | | | | experience. If you don't know how to think like an |
| read a report from the router. | | | | investigator, then how can you be one? A private |
| In order to be a good Data Forensic Investigator | | | | investigator or a person with 10,500 hours of |
| a person should be well versed in both arenas and | | | | investigation experience will know how to follow |
| have the following three main requirements: | | | | the chain of custody protocols and will also know |
| The First Requirement is a private investigator | | | | how to accurately document and correlate |
| license, both Nevada and California require this, | | | | incidents to evidence. |
| practicing without a license can have serious | | | | In conclusion, before you hire an expert in data |
| consequences. | | | | forensics and recovery make sure you check |
| The second requirement is to have computer | | | | that they are compliant with the state licensing |
| training certifications and field experience in | | | | regulations, as well as have the experience in both |
| computer forensics. It is not enough to be | | | | the fields of computer sciences and investigations. |