Our lead analyst, Jeffrey Hirth, Esq., CCE, EnCE, MCSE, is a certified court-recognized forensic expert, a certified systems engineer, and a member of the New York State bar. Beginning his career practicing securities and corporate law at a mid-size NYC law firm, Jeffrey went on to manage technology at an insurance company for 8 years, achieving the Microsoft Certified Systems Engineer (MCSE) credential. He founded Evidensics in 2008 with the goal of providing top-notch legal technology solutions, specializing in forensics and ediscovery. He has been awarded the ISFCEÂ’s Certified Computer Examiner (CCE) and Guidance Software's Encase Certified Examiner (EnCE) credentials.

Evidensics analysts are certified to perform forensic data collections and examinations and hold either or
both of the International Society of Forensic Computer Examiners' CCE or Guidance Software's EnCE credentials.

Evidensics analysts are also certified by Microsoft and have been awarded the Microsoft Certified Systems Engineer and Microsoft Certified Systems Administrator credentials, with Messaging specialization. Awardees of these credentials and specialization have passed multiple tests demonstrating skills managing enterprise information systems, with a special focus on business messaging systems such as email. These systems house the type of Electronically Stored Information (ESI) that so frequently are the target of the ediscovery
and forensic examination process.

Forensically sound procedures and protocols followed on all cases include:

• Original evidence is always write-protected with hardware or software write-blockers.
• All original evidence data is captured, including unallocated and deleted space.
• Copies of original evidence are hashed to insure an exact replica of the original.
• Examinations are performed on verified copies only.
• Examinations and acquisitions are performed using industry standard and tested hardware and software only, such as Linux, SMART, Encase, dc3dd/dcfldd, FTK, Xways, and various other tools and methods.

We offer competitive hourly and flat-rate pricing. Please contact us today to discuss the specifics of your case. The initial consultation is always free.

Your evidence will be treated with the utmost care and professionalism throughout. All originals will be returned to you at the earliest possible opportunity. A certified copy of your evidence will be kept on our system and in offsite secure storage for up to one year, along with any other work product we produce. Of course, at your option, we can preserve your evidence for as long as you wish.

Our standard agreement contains ironclad non-disclosure provisions that protect your privacy and privilege. Your data will be stored at our datacenter, fully password protected, with access provided only to the examiner and you or your designee.

Evidensics is not a law firm and does not, in any way, engage in the practice of law. No communication from Evidensics nor any opinion or information provided by Evidensics should be considered or treated as legal advice of any kind. Clients must retain separate counsel to assist and advise them on any legal matter or legal rights. Evidensics is engaged in the practice of forensic investigations and litigation support only.