19 Mar: Imp-JW Re: Req Quote: Retrieve data from crashed hard drive

* Johnny Wilkinson, Dane Wilkinson, Imperative.
* 19 Mar: Imp-JW Re: Req Quote: Retrieve data from crashed hard drive.
* Tygae: EoP Leg Sub: LJ v Gill Elliott / EoP NWO SCO: EoP NTE GM: EoP NTE GMZA| EoP Axis MilNec Evac: Lotto: EoP v WiP Law, EoP v WiP  Academia, EoP v WiP Media, EoP v WiP Charity, EoP v WiP Peacenik / EoP v WiP Neg.

From: “Johnny Wilkinson” <johnny@imperative.co.za>
Date: Thu, 19 Mar 2020 04:45:53 +0200
Delivery-date: Thu, 19 Mar 2020 04:46:51 +0200
Subject: RE: Req Quote: Retrieve data from crashed hard drive
To: “‘Lara Johnson'” <eop-leg-sub@tygae.org.za>
Cc: “‘Dane Wilkinson'” <dane@imperative.co.za>
References: <2baabc4362cf5372c5291385e91ec3f1@tygae.org.za>
In-Reply-To: <2baabc4362cf5372c5291385e91ec3f1@tygae.org.za>


Good morning Lara, thank you for the request.

The first thing would be to create an identical forensic image of the drive, along with a report that the correct procedures were followed. We then use the forensic image to recover all deleted data and leave the original hard drive intact. This is also done to ensure there was no tampering with the drive, relevant to the deleted data found which will be used as evidence to the case. We require a destination disk with at least double the capacity of the original drive. This will be used for the forensic image and to transfer the deleted data to. To save costs with the forensic reporting process, we recommend we provide you with all the deleted files (on the external destination disk) for examination by you and your client. This way we then identify a specific list of files relevant to the case. We then include a detailed list of relevant files found in the forensic report.

The estimated costs are as follows:
External destination drive: R1500 to R2500 (depending on the disk capacity required)
Forensic Imaging process: R1500 to R2500
Recovery of deleted data: R4500 to R6500
Forensic Report: R2500 to R15000 depending on the findings and report requirements, such as detailed date & time stamps etc.

All amounts exclude VAT.

Kind regards,

Johnny Wilkinson
Imperative Technology
Data Recovery Specialists, Forensic Analysis, Disaster Recovery Planning & Consulting
171 Bellairs Drive, (Cnr. of Hyperion Dr) No. 26 Barrington Estate, North Riding, Randburg
Voice: +27 11  462-1680
Facsimile: 086 623 1101
Mobile: +27 82 553 1845
E-Mail: johnny@imperative.co.za
Website: www.imperative.co.za



All information contained in this electronic transmission, including any attachments shall be deemed confidential and proprietary to Imperative Technology cc. If the reader of this message is not the intended recipient, you are hereby notified that any distribution or copying of this communication is strictly prohibited. If you’ve received this transmission in error, please notify the sender immediately and destroy the contents. Finally, the recipient should check this email and any attachments for the presence of viruses. We accept no liability for any damage caused by any virus transmitted by this email.


Leave a Comment