Nowhere to Hide
Berni Dwan · Computer Fraud & Security · 2002
There are so many good reasons to call in a computer forensics investigator. Leaking of trade secrets, sexual harassment, embezzlement, cooking the books to hide a bad situation, leaking of trade secrets or customer information, or a dismissal challenge. You want to get the hard evidence to prove that these misdemeanours really occurred, and you want the evidence to put a name to the perpetrator. Dan Verton invites us to think of computer forensics as we would an autopsy, its purpose being to determine whether or not a crime has been committed, and if so, proving it. 1 The single, consistent piece of advice from all the literature though is that you must leave the potential sources of evidence untouched until the computer forensics experts, and only they, handle the equipment. Otherwise, it is highly likely that the evidence will be inadvertently destroyed and therefore inadmissible in court.