Computer Forensics describes the examination and collection of data from a computer system. This examination can be applied to retrieve lost data, deleted data or activity conducted on the computer system. Basic recovery software and hardware is the simplest examination. Write-protected hardware and specially developed forensic examination and recovery software is the most advanced. Simply stated, the major difference in cost for an examination is the time necessary to perform the required exams; The more advanced exam requires more time. $150.00 hourly rates, plus costs of media provided following the exam apply. The exams conducted on non-damaged hardware typically require one hour for every 40 Gigabyte block. The larger the storage capacity of the data media, the longer the data acquisition time. Recovery and repair of data media can be a long process.THE CLIENT SHOULD DETERMINE IF THE VALUE OF THE DATA OFFSETS THE COST OF RECOVERY.