• Computer expert assessment and testimony
• Computer forensic examinations
• Forensic examination of other related devices
• Data conversion
• Mobile phone forensics and expert advice

COMPUTER EXPERT ASSESSMENT AND TESTIMONY
In Scotland, it is normal practice for police forensic experts to produce a Joint Report summarising computer evidence and conclusions. This report, together with the Complaint or Indictment, is the normal starting point for defence investigations. Supporting paperwork such as interview transcripts are also used where appropriate.

Geode will explain the technical issues and provide an opinion on the methodology and whether the conclusions are justified and support the Complaint.

We can arrange to visit the police experts and obtain additional information if necessary and once permission has been granted. We have dealt with all of the nine police computer-forensic teams in Scotland and can usually do this very quickly.

COMPUTER FORENSIC EXAMINATIONS
Geode maintains a comprehensive set of PC forensic tools, including EnCase 6 (the ‘gold standard’ tool for the industry). Our forensic toolkit is kept under constant review and we maintain a selection of the same tools used by the police computer crime units. Where necessary we can undertake our own parallel or complementary examinations.

Where forensic examination is not possible at Geode’s own premises, we are able to examine material on site, or make a forensically validated image on site then examine it at our premises. Note: Examination of evidence held by the Crown is normally performed on the forensic image rather than the hard disk itself.

FORENSIC EXAMINATION OF OTHER RELATED DEVICES
Computers come in many shapes and sizes, such as PDAs, game stations, security systems and voice recorders.

Geode will advise on whether we can deal with a particular device on a case by case basis, or refer onwards if necessary.

DATA CONVERSION
Geode can convert between most audio or video formats likely to be found on mobile phones or PCs and can produce playable CDs, DVDs or VCR tapes as required.

We can also read a variety of obsolete media types such as 5.25” floppies or ZIP disks.

MOBILE PHONE FORENSICS AND EXPERT ADVICE
As with computers, in Scotland it is normal practice for police forensic experts to produce a Joint Report summarising all available evidence and conclusions. Geode’s work commences with this report, plus the Complaint and any supporting paperwork such as interview transcripts, as appropriate.

Mobile phones appear in a wide variety of cases, either as Crown or defence productions. We maintain copies of two leading mobile forensic tools and if necessary can do examinations in the field. Prior notice of the make and model of the phone is usually required.

See our White Paper for further information.
Forensic Analysis of Mobile Phones

EVIDENCE RECOVERY AND CONVERSION
Geode will provide an expert or experts to attend execution of Section 1 civil orders where computer evidence needs to be identified and secured.
Seizure of evidence without such cover increases the chance that evidence will be overlooked or subsequently declared inadmissible.