vagabondo said: "can you remember an occasion where you have paid 15K for the services of IT forenics and private investigator?"
Mate, depends entirely on what evidence was being preserved and how it was being preserved. For instance, If you believe evidence has been deleted then you need the physical hard drives. Cheap if it's a laptop, not so cheap if its on an array of 15k SAS drives.
