Explain, in detail, the initial actions you would take based on the provided information including formal plans to preserve the crime scene(s) and eventual transportation of evidence to a lab. Analyze the physical and logical places where you would look for potential evidence on the suspect’s computer(s) and / or network servers. Describe, in detail, how you proceed with the email investigation, including the review of email headers and tracing.
Suppose a large aerospace engineering firm has immediately hired you as a consultant to investigate a potential violation of corporate policy and data theft. You have been informed that an employee may have been using corporate email to send confidential corporate information to one or more personal email accounts, which may or may not belong […]