Hopefully this has given you a glimpse of what we can and, more to the point, what we cannot do. The main points are these: it doesn't take 5 minutes, 10 minutes or an hour (most of the time). It requires adherence to a tried and true methodology that, in itself, takes time. Second, it really just depends on the size, time frame and scope of the evidence that is requested to be found. Evidence on the surface is easy to find. Evidence which may be buried a bit can take a lot longer and definitely require a trained, experienced examiner. Finally, we aren't miracle workers and we don't and can't fabricate anything. The evidence is either there or it's not. Plain and simple.
Patrick J. Siewert
Owner, Lead Forensic Examiner
Pro Digital Forensic Consulting
Based in Richmond, Virginia