'Ron Schmittling is a contributing author for TechnoEsq. Ron is the Security & Privacy practice leader for Brown Smith Wallace in St. Louis, MO. He and his team specialize in all aspects of information security, payment card compliance, data privacy, and computer forensics. He can be contacted at 314.983.1398 or rschmittling@bswllc.com for all of your computer forensic needs and questions.
A key employee recently left your company and returned their laptop. You’re suspicious that the employee may have taken your critical electronic data (i.e. trade secrets, intellectual property, client information, or confidential client lists). How can you tell and what recourse do you have?
Computer forensics makes it possible to determine data leaks you may have. Because the data was stored and/or transferred electronically on a computer hard drive, the use of computer forensics will help determine the events that may have transpired.
Computer forensics involves using proven, tested techniques along with specific computer tools and programs to retrieve and analyze all possible data on a system. Computer forensics can uncover email (yes, even deleted email), deleted files, and other information that may be relevant to the issues being investigated. In some situations you may also have legal recourse.
What specific steps should you initially take?
First, STOP using the laptop because any use of the computer may damage or taint potential evidence. Second, do not allow any internal staff, IT or otherwise, to conduct a preliminary investigation, regardless how technically skilled they may be. Third, secure the computer and keep a detailed log of who had access to it on the dates in question. Fourth, contact a certified computer forensics specialist to determine immediate next steps based upon your specific circumstances. Fifth, be prepared for litigation and engage appropriate legal representation.
What are some additional common uses of computer forensics?
• Corporate Fraud & Embezzlement
• Criminal Investigations
• Harassment and/or Discrimination Cases
• Divorce Litigation
• Mobile Device Investigations
• Expert Witness Services
• Corporate E-mail Investigations
• Litigation Support
• Intellectual Property Disputes
• Investigation and Discovery Litigation Programs
• Insurance Fraud
• Corporate Counsel Support
• Electronic Records Management
• Wrongful Termination
• And many more…
For additional information and/or a discussion on how computer forensics can aid in your investigation or case, please contact Ron.