Digital Forensic Division }

How Much Will It Cost?

In the past, computer forensic examinations could run tens of thousands of dollars because of the manpower necessary to thoroughly examine a hard-drive. With the advancement of technology in the computer forensics arena, that is no longer the case.

The cost of a computer forensic investigation varies greatly, depending on the number of computers involved and the complexity of the recovery of evidence. A complete computer forensic examination is an examination of the entire computer media and includes a detailed written report.

Computer forensics is a premium service charged by Intrical (with one exception) at $250 per hour.  Quotes are available for typical scenarios. The process typically involves three phases:

Acquisition

Harvesting electronic information from a computer will typically take two hours for each hard drive.  Especially large or old hard drives may take longer or require specialised processes.

Investigation

Examination of acquired information is a variable process and the timeframe for this phase depends on the type and size of your case, what is being sought and how well hidden evidence is.

Our experience has led us to develop automated processes for some aspects of typical investigations and therefore our specialist tools are able to perform some tasks without manual investigator intervention. We do not charge clients for computer time if an investigator is not actively involved in that process.

Reporting

At the end of investigation, we can produce a report on all information found.  This report can take several forms depending on the nature of the engagement and will normally involve at least one or more of the following:

Written Summary of Evidence

Where a concise explanation of the activities detected is all that is required, a written summary is the most appropriate type of report.

Detailed Report

Where continued legal action will result from the outcomes of the investigation, a detailed report is required to provide parties and the Court with all required information and expert analysis.

A detailed report may be in the form of a sworn affidavit of the investigations’ findings and exhibits supporting those findings.

Presentation to Stakeholders

Our investigators can provide a verbal presentation in support of either written report option to counsel or the client, allowing for more efficient questions and answers to ensure all parties are clear on the findings of the investigation.

Expert Testimony to a Court

Where a case goes to trial, our investigators may present findings and provide expert testimony in support of our detailed report.  Our investigators can also provide analysis and rebuttal of opposing testimony.

We have a separate charging structure for court appearances.

Time spent either testifying or evaluating the testimony of others is charged at $350 per hour.

Waiting time at a Court is charged at $250 per hour.  Waiting time is defined as any period in which the investigator is not present in the courtroom and is not actively providing a service as described above.

Other Points

• There is a ten hour minimum charge for any investigation.
• Any costs incurred in travel outside the Auckland region are disbursed to the client and travel time is charged at $150 per hour.