|
A sample of
recent cases:
Public Institution Hacked by
Motion Picture Pirate:
A
public institution was the victim of a hacker. The subject broke
into the network and placed large media files containing pirated
major motion pictures on several
computers and changed the desktop configurations. This was
discovered when the institution was notified by the owner of the
pirated motion pictures notified them their network was being
used to distribute stolen media and demanded they stop the
distribution from their hardware or be sued. Management
decided against calling law enforcement in the initial stages
and agreed to work with the owner of the pirated motion pictures
to determine the source of the hack. Our company was contacted
to work on this case. Using forensic analysis of the
files, we were able to identify the hacker. The client
gave this information to the victim (the owner of the motion
pictures) and they presented the information to the authorities
for investigation and prosecution.
Problem employee identified:
Offensive jokes were being
posted in various locations in the offices of a large
corporation. Management had identified four possible
suspects but each denied involvement. The company's IT
department could not find where the documents had been created
on any computer in the office. I was called to consult on the
matter. Using forensic analysis I determined that the
documents had been created, printed out, but never saved on the
desktop computer at one of the workstations utilized by one of
the four suspects.
Attorney facing malpractice
claim - Default Judgment set aside:
It was every
attorney's nightmare. A default judgment had been entered
against his client because no answer had been filed with the
court. The attorney knew he had signed the paperwork and
his paralegal insisted that the paperwork had been mailed to the
court. However, the paralegal did not receive a stamped
copy returned from the clerk and never followed up. The
opposing counsel would not consent to re-opening the case and my
client had secured a hearing to attempt to set aside the
judgment and re-open the case. He asked me to
perform a forensic analysis of the paralegal's computer to
determine when the document had been created and last revised,
hoping to verify her testimony. My analysis revealed that
the paralegal had in fact created the document weeks prior to
the deadline and the file had not been accessed or altered.
I appeared as an expert witness at the hearing which resulted in
a favorable ruling for my client when the Judge set aside the
default judgment and re-opened the case.
Investigation of possible
embezzlement:
An Executive at a company
was being accused of stealing or misdirecting company funds for
his personal use. The company requested I process the computer
in the subjects office to determine if any evidence of the theft
was there. No evidence of the theft was found however,
significant evidence of other activities (for which he could be
terminated) was found.
|
Computer
Forensics, Consulting, and
Expert Witness
