Untitled

Computer Forensic Rates For Service

TMD offers three types of examinations:

Basic Express Examination

This express evaluation is very basis and will make a determination if further forensic examination is warranted or advisable. The results of this examination could be the deciding factor as to whether a client, attorney or a business decides that there is sufficient evidence to proceed and will also result in a significant savings of professional fees.

The examination consists of TMD examining and performing a "keyword search" on any Hard Drive (up to 100 GB) for a total of (10) keywords provided by the client that may have relevance to their inquiry or case. Keywords can include, but not be limited to: words, phrases, names,Internet keywords ( http:www:org:com:net etc), E-Mail addresses and user names, screen names, telephone numbers, social security numbers, IP addresses, credit card numbers and much more. This service strictly includes: 1) TMD acquiring a forensic image of the hard drive. 2) Searching the drive for keywords provided by the client as stated above. 3) A basic report detailing the results of the examination) 4) Relevant data/files found transmitted to the client on optical CD or DVD media. Any other forensic work not described above(including travel time) is excluded in the flat fee of $1,200.00.

Limited Examination

This exam usually takes between 12 and 20 hours to complete. The per hour fee is $200.00. It includes finding specific items of interest to the client. (The time may increase or decrease based on the Operating System, hardware problems, multiple hard drives, floppy disks, CD, tape or other media to be examined, password protected files, encryption problems to be resolved, type and amount of data encountered,amount of data requested to be extracted,faulty digital media, E-Mail and Internet information requested, image, audio and movie files and other specific examination requests made by the client).

This service would also include: 1) Everything included in the above Basic service. 2) Expert detailed report. 3) Forensic "bit stream" image of original hard disk or digital media stored by TMD. 4)Professional viewer software ( enables client to view ANY file copied to CD without need to purchase any software). 5) Chain of custody log, exam notes, exam logs used. 6) All information required for compliance with the Federal Rules of Civil Procedure Rule 26 (FRCP) and the Federal Rules of Evidence (FRE) as they relate to expert reports and testimony in court.

Complete Examination:Entire Data Contents of Hard Disk

This examination is a complete "digital autopsy" of the hard disk. It involves identifying and archiving of EVERY existing type of data on the hard Disk. This examination includes all of what the above "Limited Examination" includes, in addition to a detailed and exhaustive report to the client or to the courts. If requested, all data will be archived onto the requested digital storage media of choice by the client or the court. This complete examination will usually take up to 40 billable hours ($200.00 per hour). (Again this may increase or decrease for reasons similar to those mentioned above in "Limited Examination section".)

Please Note: Because each examination is unique and different, and hardware and software compatibility issues vary from system to system, one cannot foresee special problems that may be encountered during a forensic examination. Some include:(multiple password schemes, data bombs, proprietary encoding, encryption,password protected files, steganography,host protected areas (HPA),destructive processes and so on.) This makes it impossible to forecast the EXACT number of billable hours in any given examination request by a client. If TMD does encounter any of the problems mentioned above, the client will be immediately contacted and advised. At that point it will be the decision of the client as to how to proceed, if any, with the completion of the examination.

Retainer: TMD requires a retainer of 50% of the estimated examination cost, prior to a " Limited or Complete" examination is started. In addition, a signed retention agreement is required before conducting an examination. The retention agreement specifies the scope and details of the examination to be performed. The "Basic Express Examination" fee is required to be paid in FULL, prior to the examination.

For Data Recovery and Data Deletion rates for service please see our DATA RECOVERY FEES

page of our website.

Should you also have any other questions or comments please E-Mail us at: support@tmdcomputerforensics.com

Computer Forensic Examinations	$200.00 per hour
Basic Express Evaluation	$1,200.00 Flat Fee
Expert Forensic Consultation	$150.00 per hour
Cell & PDA Forensic Examinations	$225.00 per hour
Electronic Discovery Consultation	$125.00 per hour
Court Testimony/Depositions	$250.00 per hr (4 hr minimum)
Forensic Travel Time	$100.00 per hour
Password Protected Files	$ 75 first password & $25 each additional.
Password Encrypted Files	$125.00 first encryption & $75.00 additional. NO CHARGE is either file is unlocked.