|
|
COMPUTER INVESTIGATION FAQS
|
Here is a selection of general questions that are often asked when considering a computer investigation. It's important to remember that each case is unique and we therefore recommend that you contact us if you have specific questions.
Is it necessary to comply with all your investigative procedures? They add to the expense!
If you wish to use DigiFor findings in any legal context, the burden of costs in implementing correct procedures is obligatory.
We suspect that a member of our sales force has been passing sensitive commercial information to a competitor using e-mail and other computer documents. How should we deal with this?
We recommend that a proper and thorough investigation be conducted immediately. Waiting until the suspect has secured a position with your competitor will, in most cases, be too late to ensure a satisfactory outcome.
I want to know what one of my employees is getting up to on his computer when I am not in the office. Can we submit his computer to you for investigation?
Yes, but please call us first for a no-obligation consultation. We can explain how the computer and other media must be handled and prepared before shipping.
I suspect that an employee has been using his computer to download indecent images from the Internet. What can I do?
Again, please call us first for a no-obligation consultation. Normally we would image the computer without the employee's knowledge. It may then be necessary for us to seize the machine if and when evidence is gathered.
|
Can't we just take a look at the person's computer until we find what we are looking for and then confront him with what we have discovered?
Any such actions will almost certainly invalidate the use of the information held on the computer in any legal proceedings. Investigations must be carried out in a correct forensic manner. Please refer to the recommended procedures on our page Taking Possession of Equipment for Computer Investigation.
Can you recover everything including deleted files?
In most cases, the results for our clients are successful. Deleted files or fragments of deleted files are recovered using correct procedures and then made available as evidence.
Can you investigate information held on mobile phones, PDAs and digital camera memory cards?
Yes.
Can you investigate recordings held on CCTV equipment?
Yes. Please contact our Forensic department as there are special considerations.
How do we involve DigiFor in a computer investigation?
You can contact us directly on 02380 511622 and speak to a member of our forensics team.
|
