|
Forensic Examinations for
Commercial Businesses
Examples
|
|
Some of the items listed below may be accomplished by your I.T. staff. What is important to consider when determining who should conduct given procedures is that even the most experienced I.T. staff member may not be familiar with producing data using forensic methodology - making the found data acceptable in a court of law. Additionaly, should the case arise, whoever conducts the examination must be able to give expert testimony in a court of law to the forensic procedures and results of the examination.
_______________________________________________
Typical types of data requested for a digital forensic examination in the commercial business sector include: email usage, website history, cell phone usage, cellular & VOIP phone usage, file activity history, file creation or deletion, chat history, account login/logout records, and more...
EXAMPLES:
-
Administrative / HR investigations into harassment or other improper or unlawful communications between staff or staff-to-clients by means of cellular or VOIP phone systems, emails, chats, website or social network posts (MySpace, Facebook, etc.), or by any other means of digitally transferred or stored media;
-
Investigations of current or past employee data theft;
-
-
Investigations into the access of restricted company data - including internal hacking investigations, access to financial and other restricted directories on a company network, and access to company banking accounts, invesment accounts or client records;
-
Investigations of disputed transactions and / or communications;
-
e-Discovery of data to support insurance claims after a loss;
-
Password recovery and recovery of lost files - including the recovery of data from damaged storage devices;
-
e-Discovery or recovery for audit's or post-incident investigations of data sabotage;
-
e-Discovery for the purposes of auditing I.T. procedures - ensuring that legal requirenments are being met;
-
Investigations into improper or unlawful content being copied, accessed or produced on company computers or when connected to company networks;
-
Investigations into critical incident threats or actions against individuals, groups, clients or facilities of the company - including bomb threats, shootings and vandalism.
|
