PROTEGGA LLC Frequently Asked Questions

What is Computer Forensics?
Computer Forensics is the collection, preservation, discovery, analysis, and presentation of evidence found on digital devices. Computer Forensic Experts draw on a variety of methods for discovering and analyzing information that resides on computer systems, personal digital assistants (PDA), cell phones, and other electronic devices. Computer Forensics has proven to be extremely useful in a wide range of legal issues for both plaintiff and defendant.[top]

Who would need Computer Forensic services?
Any business or individual who needs to investigate the activities associated with the use of computers or other digital devices. This would include almost everyone involved in a dispute or has good reason to believe involvement is pending, especially if the other side has retained a Computer Forensic Expert. Computer Forensics is extremely valuable in litigation to support claims of embezzlement, fraud, intellectual property theft, and security and Human Resource policy violations. Criminal Law cases, both prosecution and defense, are dramatically enhanced with the recovery and/or dispute of computer evidence. Computer Forensics is even being utilized in family law cases with increasing regularity, as estranged spouses recognize the potential for evidence to support custody and divorce settlements.[top]

Who can allow a computer to be searched?
The owner of a computer can grant permission for it to be examined. A business may grant permission for a search on any of their computers regardless of who uses it. In a civil dispute, the parties can agree to an examination or the court can order an examination. In a criminal case, the computer will usually be seized by law enforcement through the use of a search warrant. The defense can obtain copies of the seized items and any findings of its examination.[top]

What does a Computer Forensic Expert do?
At a high level, the Computer Forensic Expert copies, examines, and analyzes information, prepares a report, and substantiates findings in depositions and through expert testimony. The first step is to work with counsel to develop an appropriate strategy and determine the evidence needed to support the case. The next step is to collect and preserve the evidence. Digital data is extremely volatile and preservation procedures must be carried out to eliminate all possibility of modification or destruction of computer evidence. Finally, an analysis is performed on the collected information. The actual analysis of the evidence is always done on the mirror image to ensure no changes can possibly be made to the original evidence. Analysis may include keyword searches, timeline analysis, deleted file recovery, email analysis, and other tasks related to evidence identification and recovery. Finally, a detailed report is created and presented to counsel.[top]

What type of evidence can be found on a computer?
The answer depends upon the activities under investigation. Cases involving theft of trade secrets may focus on the recovery and analysis of all electronic communications, file copies, file print activity, access to CD burners and floppy drives, and more. Cases involving sexual harassment or wrongful termination turn to Computer Forensics to develop activity profiles such as email communications and Internet browsing habits. All types of evidence can be recovered, even data that has been deleted.[top]

Why use a Computer Forensic firm to evaluate digital evidence?
While you may have access to experienced computer resources, it is unlikely these individuals are trained in forensic protocols which can result in destruction and spoliation of evidence due to improper methods. The preservation, extraction, and analysis of computer evidence in a forensically sound manner requires access to specialized hardware and software and the knowledge to utilize these tools. Perhaps most important of all, Computer Forensics must be performed by an unbiased third party. Claims of evidence tampering or fabrication will be presented by opposing counsel in almost every case and a respected Computer Forensics firm can demonstrate forensically sound methods that are court-approved and impartial. As an Expert Witness, a Computer Forensics firm can provide opinions and conclusions relative to the findings.[top]

How much does it cost?
Be very careful in your evaluation of costs. One of PROTEGGA'S clients had previously hired a respected Computer Forensic firm that charged an apparently reasonable rate of $250 per hour. However, this firm included all unattended computer processing time in their hours. This same firm charged over $12,000 for 10 hours of imaging work. The client spent over $70,000 for a job that should have been no more than $25,000. Another firm charged double time for any work performed with less than 24 hours notice. PROTEGGA adheres to the highest professional and ethical standards with costs always clearly defined.

Our rates:    $200 per hour (Computer Forensics, Expert Witness, Litigation Support)

Imaging:       $100 per 10GB (Average drive of 60GB = $600) (Plus Hard Drive)
                     or $200 per hour, whichever is less ($200 minimum)[top]

Why are your rates lower than others in this field?
PROTEGGA desires to have Computer Forensics, Litigation Support, and Private Investigation services available to everyone, not just those blessed financially, while providing the same, or greater, expert level of service available anywhere.

Utilizing the following factors and 18+ years of experience, PROTEGGA has set rates that are fair to everyone involved.

1."... doing what is right; even when it's not in your best interest."
2. Length and expense of education.
3. Experience required.
4. Insurance costs.
5. Specialized training and tools.
6. Licensing requirements.
7. Cost of qualified personnel.
8. Facilities costs.
9. Industry acceptance and historical trends.[top]

Is Data Forensics different than Computer Forensics?
No. This is simply a marketing ploy. Almost every electronic device currently in use contains a computer component that stores data in some form. Anything that stores electronic data can be a target for evidence collection, including desktop computers, laptops, servers, personal digital assistants (PDA), cell phones, etc. Computer Forensics, therefore, is an accurate and all-encompassing term.[top]

How does Computer Forensics differ from e-discovery?
E-discovery is the process by which parties involved in litigation respond to requests to produce electronically stored information. The production of electronically stored information may be provided by a Computer Forensic Expert and there are definite benefits to having discovery performed this way. Computer Forensics is employed (1) to ensure all the information provided throughout discovery is accurate and complete, or (2) to perform a Computer Forensic investigation when discovery falls short of expectations.[top]

Isn’t Computer Forensics just a data recovery effort?
Unlike ordinary data recovery efforts, Computer Forensic examinations use strict controls and procedures to ensure that all existing data is found, that the original data is preserved unchanged, and that any recovered data is admissible in court or other legal proceedings. Computer Forensic examinations are an investigative process and data recovery is only a very small part of that process.[top]

What geographic areas do you serve?
While available for service anywhere within the United States, PROTEGGA primarily serves the State of Texas. PROTEGGA is located in Plano, Texas. From here, PROTEGGA has served clients since 2003 within the Dallas and Fort Worth area. PROTEGGA has supported cases all over North Texas in Dallas County, Collin County, Rockwall County, and Tarrant County courts.[top]

What license does the State of Texas require?
In Texas, if a company engages in the business of securing, or accepts employment to secure, evidence for use before a court, that company is required to have a Private Investigator’s License, according to Texas Occupations Code Sec 1702.104. Private Investigation companies are overseen by the Private Security Board of the Texas Department of Public Safety. Click here to verify the license of Private Investigators and Private Investigation Companies.[top]

Do you ever provide your services Pro Bono?
In short, the answer is Yes. The primary goal of PROTEGGA is to ensure Computer Forensic services are available to everyone that has a need. We have provided services for free and at discounted rates when the situation requires it. If you have a need, contact us and let us see if we can assist you. [top]

What forms of payment do you accept?
PROTEGGA accepts checks, cash, MasterCard, and VISA. Given the right situation, we have provided payment plans as well. [top]

How do I file a complaint with the Private Security Board?
Hopefully, your issue is not with PROTEGGA, but rather with another firm. In any case, if we, or another firm, have failed to resolve your issues, here is the contact information for the Private Security Board. Please include the name of the firm and the license number in any correspondence to the Private Security Board. For PROTEGGA use, PROTEGGA LLC Texas License #A13971.

Private Security Bureau
By mail – PO Box 4087, Austin, TX 78773
By facsimile – 512-424-7729 [top]

Where should I go to serve a subpeona on a Protegga employee?
Hopefully, you have contacted PROTEGGA before going to the trouble of a subpeona. We are in the business of appearing at depositions, hearings, and trials and always try our best to accomodate everyone's needs, regardless of who's paying the bill. If you still need to serve us, use the address below.

7600 Watson Drive
Plano, Texas 75025 [top]