Scope
- Digital forensics of company issued desktop
- Focus on theft of Intellectual property through use of removable media, network copy, printing or data deletion
- Remote access of company system to unauthorised users
- Any additional evidences to prove data theft
Standards Followed
Digital forensic standards used for:
- Hard disk image acquisition
- Hard disk image analysis
- Preservation of chain-of-custody
Key Achievements
- Identified traces of data deletion
- Identified traces of unauthorised access to the system
- Identified use of removable media anti-forensic tools,
- Use of elevated privileges
