Case Files

The following is a sample of cases recently worked on by EFS. They are described in a generic fashion to provide some insight into the type of work we do while not breaching client confidentiality.

EFS clientele include Corporations, Regulatory Agencies, Law Firms, Law Enforcement Agencies, Accounting Firms, Insurance Firms and Private Individuals. EFS have been called upon to complete work all across North America with our main body of work in Western Canada.

EFS assists a regulatory agency on an ongoing basis with over-site of its members, providing in-house training, technical advice, forensic preservation, analysis, secure storage and transport of sensitive data.

EFS assisted with a search by a regulatory agency and were able to adjust when the estimated 12 computers became 47 hard disks. EFS completed imaging in two days well within the client time line.

The status of a computer data artifact, critical to the client’s case, was subject of two conflicting expert reports.  An EFS consultant was able to dissect the conflicting reports, itemize the errors that lead to the conflict and establish the true context of the data, resolving the matter in the clients favor.

EFS consultants assisted a client with complying with electronic discovery. EFS used remote forensic capabilities to collect from 2 international sites at substantial savings to the client over on-site attendance. The targeted collection gathered 4TB of custodian data, over 4 sites from PC’s, Network shares and e-mail archives and was completed successfully with minimal disruption to client operations.

EFS, available on short notice, completed an electronic discovery collection on behalf of a client responding to a regulatory agency's request for documents. A targeted collection of 2TB of custodian data from PC’s, Network shares and e-mail archives was promptly completed.

EFS consultants provided client advice that led to determining an ex-employee and a current employee were colluding to compete with the client. EFS assisted with affidavits and execution of an Anton Pillar order at three sites and subsequent analysis.

EFS assisted an industry association with their due diligence efforts in responding to allegations against an association officer and unrelated criminal charges. Digital media was forensically imaged and secured preventing its loss or tampering while events unfolded.

EFS has assisted a corporation with the preservation of servers, workstations and Blackberry cell phones assisting with transitional issues during its takeover of a competitor.

 EFS assisted a law firm with identifying historical USB activity to link a suspect's computer to a USB camera device which was previously used on that system.  Suspect had previously denied ever plugging in the camera to the system.

EFS assisted an employer with analysis of an employee’s PC who was accused of sexual harassment in the workplace.  Computer artifacts recovered included many inappropriate images, chat conversations and videos which were put into a comprehensive written report detailing a timeline of events which illustrated the excessive amount of time the employee spent on the computer on these inappropriate non-work related activities.

EFS consultant assisted enforcement agency with installation of software on a computer to allow covert monitoring of the user, assisting in resolving the matter at hand successfully.

EFS assisted a School Board with imaging 22 computers after hours, EFS completed analysis for inappropriate use, provided detailed reports and expert witness services at an arbitration hearing that lead to a successful outcome for the client.

EFS staff assisted an educational institute with forensic imaging and review of digital evidence in the investigation of a staff member’s conduct with students.

EFS was asked to review forensic images of a hard drive collected by another forensic firm on behalf of a government client. The other firm had concluded data was missing from the drive and likely purposefully deleted prior to imaging. EFS established that the problem was not due to nefarious activity by the data owner, but was the result of errors during the imaging of the hard drive by the other forensic firm.

EFS assists a law enforcement department with forensic imaging and analysis needs on an ongoing basis including computers, tablets, skimming devices and cellular phones.