Case Files

 

The following is a sample of computer investigation cases recently worked on by e-Forensic. They are described in a generic fashion to provide some insight into the type of work we do while not breaching client confidentiality.

e-Forensic clientele include Corporations, Regulatory Agencies, Law Firms, Law Enforcement Agencies, Accounting Firms, Insurance Firms and Private Individuals. e-Forensic has been called upon to complete work all across North America with our main body of work in Western Canada.

References are available upon request

 
Regulatory

e-Forensic assists a regulatory agency on an ongoing basis with over-site of its members, providing in-house training, technical advice, forensic preservation, analysis, secure storage and transport of sensitive data.

e-Forensic assisted with a search by a regulatory agency and were able to adjust when the estimated 12 computers became 47 hard disks. e-Forensic completed imaging in two days well within the client time line.

A client requested e-Forensic examine a GPS system from a commercial boat which had been submerged in salt water. The boat was used in a criminal act and investigators wondered if the GPS system could contain data that would further the investigation. The GPS unit was removed from the submerged boat , rinsed with fresh water and sent to e-forensic's lab. Once received, it was dismantled and dried out over several days. Once dried it was put back together, reconnected to a power source and powered up successfully. The data extracted to a portable drive, then plotted onto a map and provided to investigators.

Corporate

The status of a computer data artifact, critical to the client’s case, was subject of two conflicting expert reports.  An e-Forensic consultant was able to dissect the conflicting reports, itemize the errors that lead to the conflict and establish the true context of the data, resolving the matter in the clients favor.

e-Forensic consultants assisted a client with complying with electronic discovery. e-Forensic used remote forensic capabilities to collect from 2 international sites at substantial savings to the client over on-site attendance. The targeted collection gathered 4TB of custodian data, over 4 sites from PC’s, Network shares and e-mail archives and was completed successfully with minimal disruption to client operations.

e-Forensic, available on short notice, completed an electronic discovery collection on behalf of a client responding to a regulatory agency's request for documents. A targeted collection of 2TB of custodian data from PC’s, Network shares and e-mail archives was promptly completed.

e-Forensic consultants provided client advice that led to determining an ex-employee and a current employee were colluding to compete with the client. e-Forensic assisted with affidavits and execution of an Anton Pillar order at three sites and subsequent analysis.

e-Forensic assisted an industry association with their due diligence efforts in responding to allegations against an association officer and unrelated criminal charges. Digital media was forensically imaged and secured preventing its loss or tampering while events unfolded.

e-Forensic has assisted a corporation with the preservation of servers, workstations and Blackberry cell phones assisting with transitional issues during its takeover of a competitor.

 e-Forensic assisted a law firm with identifying historical USB activity to link a suspect's computer to a USB camera device which was previously used on that system.  Suspect had previously denied ever plugging in the camera to the system.

e-Forensic assisted an employer with analysis of an employee’s PC who was accused of sexual harassment in the workplace.  Computer artifacts recovered included many inappropriate images, chat conversations and videos which were put into a comprehensive written report detailing a timeline of events which illustrated the excessive amount of time the employee spent on the computer on these inappropriate non-work related activities.

Government

e-Forensic consultant assisted enforcement agency with installation of software on a computer to allow covert monitoring of the user, assisting in resolving the matter at hand successfully.

e-Forensic assisted a School Board with imaging 22 computers after hours, e-Forensic completed analysis for inappropriate use, provided detailed reports and expert witness services at an arbitration hearing that lead to a successful outcome for the client.

e-Forensic staff assisted an educational institute with forensic imaging and review of digital evidence in the investigation of a staff member’s conduct with students.

e-Forensic was asked to review forensic images of a hard drive collected by another forensic firm on behalf of a government client. The other firm had concluded data was missing from the drive and likely purposefully deleted prior to imaging. e-Forensic established that the problem was not due to nefarious activity by the data owner, but was the result of errors during the imaging of the hard drive by the other forensic firm.

e-Forensic assists a law enforcement department with forensic imaging and analysis needs on an ongoing basis including computers, tablets, skimming devices and cellular phones.

 

e-Forensic assisted an agency with the technical requirements to capture data from a laptop computer. It was decided a laptop computer would be given to a suspect, via an agent, in order capture data that might further the investigation. Once a court order was obtained, e-Forensica prepared a laptop computer to capture data and covertly transmit that data to the agency. After setup of the laptop, it was provided to the suspect who put it to use. The result was a successful conclusion to the investigation and a guilty plea entered before the court.

 

 

blog & news

Spring 2017 Lunch & Learn

   June 9, 2017 EFS Lunch & Learn: Digital Forensic Technology ...
read more
twitter feed
  • Malware campaign targets security researchers with bogus cyber conference document via
  • Really ? Canada's 'super secret spy agency' is releasing a malware-fighting tool to the public
  • Purchase a SiForce One, get free upgrade to a Intel® Core i9-7800X 10-core processor, a $600 upgrade. Contact us for more info
follow us on twitter