ABOUT > PRACTICE AREAS > INTERNAL INVESTIGATIONS
Internal Investigations
Forensicon has built its reputation by discreetly investigating current employees suspected of wrong-doing. Our experienced examiners make a forensic copy of the employee's computer or laptop, as well as networked servers where additional files may have been backed up. Our examiners try to recreate the behavior of the suspect in an attempt to conclusively prove motive and means, as well as detailing any attempts to conceal their actions.
Our reports have helped exonerate the innocent, and our expert testimony at trial has helped prosecute wrongful actions and win or defend civil actions.
A design firm copied a large quantity of work product onto an external hard drive for their client's review. After the fact, the client indicated that there was a large quantity of inappropriate images present upon the hard drive and voiced concern that, additionally, some of those images appeared to involve minors. Prior to taking action against the employee who was responsible for the file transfer, Forensicon was retained to investigate the matter. During the examination of the drive and its contents, it became apparent that the files in question were created prior to the purchase date of the hard drive, and were not created by the suspect employee. It was the product of a hard drive that was "recycled" by the device manufacturer.
Articles
- Liability of Email
- Document Retention Policies
- Monitoring Employees
- Worker Beware
- Data Security - What To Do When an Employee Leaves
- Track Former Employee's Computer Activities
- Time is of the Essence
- Know What to Ask - Ensuring a Successful E-Discovery Request
- What Can Computer Forensics Do For You?
Case Studies
- In re Lernout & Hauspie Sec. Litigation
- Liebert v. Mazur
- Portis v. City of Chicago
- QZO, Inc. v. Moyer
- People v. Superior Court
- United States v. Phillip Morris
- YCA, LLC v. Berry
Computer Forensic & Electronic Data Discovery Services
- Forensic hard drive imaging
- Observation and documentation of imaging process
- Hostile site acquisition
- Password recovery/removal
- Data decryption
- Data compression & imaging
- Media type conversion
- Duplicate file elimination
- Forensic examination of log files and computer registry
- Swap / META file examination
- Website visit logs and internet cache examination
- Email searches
- Expert report writing
- Expert testimony
