Removable Media & Mass Data Storage Preservation

The nature of externally connected devices (such as USB thumb drives, external hard drives, or even large-scale storage devices such as Network Attached Storage (NAS) or Storage Area Networks (SANs) can provide relevant evidence in a matter but offer up a number of challenges that need to be addressed.

Removable Media

The ubiquitous nature of removable media often makes this classification of data storage quite relevant in matters.  Vestige is well-equipped to preserve any and all relevant devices.

In addition to preserving such data, there are some challenges surrounding removable media that Vestige can assist with addressing, including:

• Identification of the presence of and/or count of removable devices and ensuring that potentially relevant items are identified
• Legacy and/or proprietary cabling or interfaces that make accessing such device and the data contained therein difficult
• Slow transfer rates

Mass Data Storage Preservation

Whether a data custodian is using a USB external hard-drive that is excessive in size or the organization relies upon technology such as Network Attached Storage (NAS) or Storage Area Networks (SANs) that hold tremendous volumes of data, the proper preservation of potentially relevant data can appear to be arduous.  Creating a forensic clone of such devices can be extraordinarily time-consuming, difficult, and in some cases impossible.

Therefore, different strategies need to be employed, including partial or “targeted” collections.  Regardless of such choices, the same care must be taken to ensure that data that is preserved from such devices can be authenticated.  Vestige has experience with a wide range of devices of this nature and can help establish a preservation plan to address the needs of the case at-hand.

For more information or to discuss the manner in which Vestige assists clients with these and related challenges, contact us today.

CONTACT US