Learn Social Engineering

Response

Detailed forensic analysis revealed the wiping software had failed to recognize the RAID array and had consequently wiped only one of the two hard drives. As a result, the data on the second drive was fully intact. We had evidence of intentional spoliation as well as the missing data. Investigators focused their attention on this drive. One investigator was tasked with examining retrieved files from this computer to uncover evidence that the subject company was hiding evidence in violation of the court order, while the rest of the team concentrated on uncovering evidence of the whereabouts of the missing equipment. While conducting his investigation, the lone investigator discovered a word-processing document that contained a list ...