Mobile and Digital Forensics

IT Group is at the cutting edge of digital and mobile forensics. We are regularly instructed in matters of serious organised crime, fraud, IP theft and employee misconduct to assist in the identification and interpretation of digital evidence.

  • Digital Forensics
  • Mobile Phone Forensics
  • Cell Site Analysis
  • CCTV Analysis

Digital Forensics

Digital Forensics is one of IT Group’s core practices and we are regularly instructed in the identification and interpretation of digital evidence, for both civil and criminal cases.

With a wealth of experience, knowledge and the appropriate forensic tools, IT Group is able to collect, analyse and preserve electronic evidence from a range of devices such as large-scale email servers, ERP systems, Blackberry Enterprise servers, virtual and raid-array servers and more. Typical cases require the investigation of the time, device and location an email, website or document was created, copied or viewed.

Additionally, IT Group also provides expert witness services for offences covered under the Computer Misuse Act 1990, including unauthorised access and modification of a computer or its files, phishing, software piracy and internet fraud.

The technical investigation conducted by Jason Coyne was thorough and the presentation of his report was both objective and pertinent. I continue to have a high opinion of his abilities.

Martin Hicks QC

The Chambers of David Waters QC, 2 Hare Court

Digital Investigations


In the corporate environment, rapid deployment and low operational impact are key and we are often instructed by banking or insurance organisations in relation to suspected fraud or the leakage of confidential data.

Typical cases require us to investigate the following questions:

  • When emails were created and which websites have been viewed?
  • When was a document created and has anything been copied or deleted from the machine?
  • Was the document created on a specific device or downloaded from the internet?
  • Have any portable memory devices been used and if so when and what was copied?
  • Has any of the client’s intellectual property passed through a specific device?
  • When were server accounts created, and from which machine?
  • Which files were accessed on which servers?


Past Experience 


IT Group consultants have been instructed as Expert Witnesses in ground-breaking cases where credible digital evidence was critical, such as the examples below.



CBI India: Extradition Proceedings
Ravi Shankaran

Richard Butler-Creagh
Aida Hersham (EWHC 2525 High Court Queen’s Bench)

Kingsway Hall Hotel
Red Sky IT HMRC (EWHC 965 High Court Queen’s Bench TCC)

Anglia Autoflow Limited
Wrightfield Limited (EWPCC 3 Patents County Court)

Slater (Inner London Crown Court (on the Instructions of the Met Police)

Mobile Phone Forensics

Mobile phones contain a wealth of data - far more than the mobile phones of the 2000s. In 2004, Motorola released the Moto Razr V3 which could hold 5.5MB, while only 5 years later, the Apple iPhone could hold up to 32GB - nearly 6,000 times more data!

With all of this space, more and more data can be stored by the mobile device as well as the applications installed. This aids forensic analysis of the devices because there is less chance of old data being overwritten with new data with so much available storage and this means we can usually gain access to much more evidence that can then be used in all manner of cases.

A typical device will hold emails, messages, photographs and documents - all of which can be forensically recovered, imaged and examined and used as evidence in legal proceedings.

Location data, communication history and internet activity can be pieced together to provide a unique insight into the particular behaviours of the user which can often prove vital to a case.

    What Can Be Recovered?


    • SMS/Text Messages
    • Call Data
    • Voicemails
    • Photographs
    • Videos
    • Satellite Navigation History
    • Physical Locations
    • Chat Application Messages
    • Internet History
    • Search History
    • Stored Credentials
    • Application Usage

    Cell Site

    IT Group can analyse the data stored when SMS messages or calls are made or received, enabling us to geographically locate a mobile phone to a specific area. Should you need to establish the whereabouts of your client at any given time, data from cell site analysis can provide you with critical evidence that can be used in legal proceedings.  

    The process involves analysing the call data records from the service provider and where necessary, conducting on-site surveys and analysing the measurements taken at the location of the serving cell site mast to determine coverage.

    IT Group has decades of combined experience in providing cell site forensic services in criminal and civil litigation. We have invested heavily in expert training and state of the art technical mobile forensic equipment to ensure we can provide a fast turnaround and a highly competitive cell site and attribution phone service to our clients.

    CCTV Analysis

    Surveillance footage recorded by CCTV cameras can often provide invaluable evidence in legal proceedings, so it is vital that this footage is recovered safely. We have the experience, expertise and tools to analyse footage quickly and securely, without compromising the data.

    We have been involved in a number of cases where CCTV footage provided critical evidence in a case. Our instructions have ranged from improving video quality in order to identify a getaway vehicle after a robbery to using frame-by-frame analysis in order to assess who was at fault for a road-traffic accident.


      Our services include:


      • The recovery of deleted recordings
      • Timing correlation of events based on video evidence
      • Expert analysis of CCTV evidence presented by prosecutors or other experts
      • Production of CrPR (Criminal Procedure Rules) Part 19 compliant reports and Section 9 witness statements
      • Presentation of expert opinions in court proceedings

      If you require further information please call us on 0845 226 0331.

      • Digital Forensics
      • Mobile Phone Forensics
      • Cell Site Analysis
      • CCTV Analysis