Image Extraction

As image is such a volatile format that can become inadmissible evidence if handled incorrectly, it is vital that the first link in the chain of custody is performed correctly. Extraction of an image from a device can change vital information within the metadata if the correct procedures are not closely followed.

We use forensic tools such as write blockers (to prevent any data been written to the device) and forensic bit-stream software (to ensure a bit for bit copy is created) to extract images from mobile phones, cameras and hard drives.