Our Experiences in Digital Forensics
Digital Evidences vs. Digital Forensics
The definition of forensic science is the application of scientific knowledge and methodology to legal problems and criminal investigation. Forensic scientists would collect evidences from the crime scene, and conduct fingerprint analysis, biology comparison, handwriting analysis and etc. The purpose of forensic is to find the truth of what happened. With the evolution of computer and internet technology, traditional record used to exist in paper, becomes the data stored in computer or mobile devices, and writing mail began to deliver through email. Moreover, this creates another difficulties: digital evidences.
Digital evidences are stored as metadata within the files of a computer, contacts and dialogs of a mobile phones, mailing logs in th email, user behaviors in a target machines. Some of these digital evidence cannot be identified, and it must cooperate with the help from forensic experts and equipments to extract and analyze these contents.
Forensic Cases
Case 1
We assisted a medical institution in investigation of an system alteration made by their contractor. Our team collected the evidence and analyzed the effected system, found the alteration within millions lines of syntax. We provided the evidence and findings for the client.
Case 2
Unidentified files were found on several external server of an insurance company. The client suspected an intrusion activity to the system. Our team was contacted to analyze the server and find the behavior of the hacker, and how the intruder access internal data.
Case 3
An subsidiary of a media company suspected a high ranking officer for fraud and emptying situation. Our forensic and fraud investigation team were send to the company, focusing on the collecting evidences from the accounting system, transaction history, and human resource data. During the investigation, in order to further understand the incidents, we conducted interviews of mid-level staffs, and provided the parent company the result of the investigation.
Case 4
