Identification report - Essay Example

Identification Report Executive Summary I, Billy Bob, Digital forensic examiner working for Champlain Forensics, Inc., have been appointed to assistthe Senior Investigator Paula Sanchez in a confidential investigation involving possible intellectual property theft committed by Mr. Kon Tajewski.I have been tasked by Ms. Sanchez to go to the suspect’s office at 45 Mulholland Drive, LA in order to examine it and identify all possible items that could have evidentiary to this investigation.This report contains a detailed narrative of the same.

NarrativeRegarding the purpose of the expertise to be performed in Tajewski’s office, I will need to check all possible digital devices in order to support or refute the suspicions on his complicity for the crime. I arrive on scene at 45 Mulholland Drive, LA at 15:30 and meet Mr. Kon Tajewski’s manager who walks me to the office handing in a signed agreement allowing me to perform digital forensic expertise on all the devices present in the office. The office is a large room on the 3rd floor with minimalistic design.

The writing table at the window is almost idle with Tajewski’s computer, a deed box and a phone on its surface. The cabinet standing on the left is filled with files and documents with the external hard drive of 2TB capacity and a flash drive of 15 GB capacity on the bottom shelf. First and foremost, it move on to access and check Tajewski’s computer for suspicious data. Having got a password from his manager, I launch file check in order to identify files that have any coincidences with those that have been stolen.

The files need to be examined for any text matches with the stolen ones. Proceeding with the investigation, I detect and check all recent data including deleted files using a files recovery program (Handy Recovery): this will help me to identify if the suspect tried to dispose of the stolen property in this way. Recycler bin is also checked as well as all the folders requiring passwords. Going further, I check all the files in order to identify and collect the data that wasn’t created on this computer and has no PC administrator’s signature.

Setting the date filter on files, I sort out all the files that have been created or copied after the theft. All these files must be taken for an expertise to Champlain Forensics, Inc. At my our next step, I perform a detailed check of Mr. Tajowski’s mailings and contacts as it can give us a hint on his complicity for the crime (especially if there are attempts to sell the stolen property to a third party). I make a copy of the mailing history and the contact list.Having finished with the computer, I proceed with check of all external media present in the room.

I check all the files on the flash drive as well as on the hard drive sorting them by the date and testing for text match. Next I examine the drawers of Tajewski’s writing table and find a pile of CDs and DVDs there (these will be taken for further expertise). Then I check the telephone standing on the table together with the automatic responding machine for call history and received voice messages. All the saved numbers are collected for further identification.ConclusionMany items of interest have been identified.

These include: the pile of CD and DVD disks that require further examination, the flash drive for further file expertise. Moreover, all the data sorted out from Tajewski’s computer, flash drive and hard drive was copied to my flash drive and will be taken to Champlain Forensics, Inc. for expertise. Mailing and message history as well as contact lists were also copied and retrieved for expertise.Signed by BBBilly Bob