Digital Forensics
Private Investigator
Learn More
Contact Us

Post-Mortem Acquisition

Western Digital hard drive analysisIn digital forensics analysis, post-mortem acquisition is the process of recovering deleted data from a device which is disconnected from its power source.

This is the most common form of computer forensics acquisition when dealing with desktop computers and laptops. Typically, the hard drive is removed from the powered-down computer, plugged into a write-blocker and cloned bit-for-bit onto a blank drive.

The rule of thumb in computer forensic analysis says if a device is on leave it on, and if it’s off leave it off.

Post-mortem acquisition can also refer to cloning optical media like CDs, DVDs and Blu-ray discs, and flash storage like USB thumbsticks or memory cards.

Investigations are typically performed on cloned information to safeguard against critical errors which might destroy evidence. To ensure the integrity of the copied data allowing it to be admitted as legal evidence, hash values are used to verify exact duplication.

Contact our Milwaukee private investigators at Spindletop Investigations in advance to discuss your options for digital forensic analysis.


Back To Glossary

Private Investigator Services  |  Digital Forensics  |  Find Out More  |  Contact

Call Us Today 414-377-8207

CONFIDENTIALITY DISCLAIMER All information obtained during the course of an investigation will remain confidential and solely between the investigator, Spindletop Investigations, LLC, and the client. However, private investigators are legally required to report any instances of child pornography or sexual crimes against children. Spindletop Investigations may choose to report other potentially serious crimes if they involve the risk of the loss of life. Spindletop Investigations will not pursue any unrelated leads outside the agreed upon scope of the investigation. As part of the consultation, Spindletop Investigations will work with the client in advance to fully define the scope of the investigation as well as all legal exceptions to our confidentiality agreement.

© Spindletop Investigations. Milwaukee, Wisconsin  |  Site map