Computer & Phone Forensic Recovery
Budget: $250 – $750 USD
I need a certified digital-forensics specialist to examine two categories of devices—Windows-based computers and Android phones—to locate, preserve and report on evidence that includes deleted files and chat messages.
You will be working with full physical access to each device and my explicit consent for acquisition, so please outline any collection hardware or write-blockers you will require before we start. Imaging should follow best-practice chain-of-custody procedures; I expect hash verification (MD5/SHA-256) for every acquired image.
Deliverables
• Forensic images of each drive/handset in E01 or AFF4 format
• A concise yet comprehensive examiner’s report describing methodology, recovered data, and timeline analysis (EnCase, FTK, Autopsy or Cellebrite UFED are all acceptable—state your preference).
• Spreadsheets or databases containing the carved files and parsed chat logs, clearly indicating source device and file path.
Acceptance criteria
The report must be reproducible, courtroom-ready and reference all recovered artifacts that match the scope: deleted files and chat messages only. Any tools or scripts used should be listed with version numbers.
If questions arise during triage, keep me in the loop so we can adjust scope in real time. Looking forward to your expertise in bringing this evidence to light.
You will be working with full physical access to each device and my explicit consent for acquisition, so please outline any collection hardware or write-blockers you will require before we start. Imaging should follow best-practice chain-of-custody procedures; I expect hash verification (MD5/SHA-256) for every acquired image.
Deliverables
• Forensic images of each drive/handset in E01 or AFF4 format
• A concise yet comprehensive examiner’s report describing methodology, recovered data, and timeline analysis (EnCase, FTK, Autopsy or Cellebrite UFED are all acceptable—state your preference).
• Spreadsheets or databases containing the carved files and parsed chat logs, clearly indicating source device and file path.
Acceptance criteria
The report must be reproducible, courtroom-ready and reference all recovered artifacts that match the scope: deleted files and chat messages only. Any tools or scripts used should be listed with version numbers.
If questions arise during triage, keep me in the loop so we can adjust scope in real time. Looking forward to your expertise in bringing this evidence to light.
Related categories:
Report Writing
Data Extraction
Data Analysis
Technical Documentation
Digital Forensics