One of the more troubling statements we hear when we start an investigation is that the IT department has already looked at the computers for evidence. Companies that allow their IT professionals to place their size fourteen boot prints over the scene are looking for trouble!
When is the best time to image computers and mobile phones in an investigation? We have often seen that computers are not imaged because it is impossible to delete data from a computer, or the computer guys will always find the information. The truth is that computer data is extremely fragile, and once overwritten is gone forever.
Join Forensic Restitution on Thursday for a brief discussion on computer forensics, and the steps that should be taken in an investigation.
Questions: If you have any specific questions you would like addressed, please forward them to Sachin@forensicrestitution.com.
Register: Please join us on Zoom using the following login details:
Topic: The F word – Computer Forensics
Time: Sep 17, 2020, 01:00 PM Eastern Time (US and Canada)
Meeting ID: 881 1824 5177