Search orders granted by civil courts can be difficult to carry out if there is uncertainty as to what the order allows to be removed and what is actually needed for a civil investigation. Using experts in the Computer Forensics industry to help carry out civil search orders can help to remove or reduce the complications involved in this process.

Once a search order has been granted, the individuals named on the order have the legal right to enter a property and secure any relevant material that may be used in an investigation. The relevant material might include computer data, which must be handled correctly to ensure that the continuity and integrity of the data is maintained. This is essential as any evidence which may have been tampered with or that has been acquired incorrectly may not be allowed to be used in court.

During search orders Aperio analysts will attend the scene and work with others on site to advise on how to handle evidence and to complete the search order effectively and within the search order. In some cases, the search order may not allow analysts to remove computer systems or electronic devices. As a result the team may have to create forensic images of the devices on site whilst the search order is being carried out. This isn’t always practical as, depending on the size of the storage on the device or size of hard drive, can take several hours. In this situation there is no other choice but to remove the item in question and image it off site in a forensic lab.