Preserving Electronic Evidence
A misstep in preserving electronic data for litigation could mean defeat before the enemy is even engaged.
According to Greg Fordham, a founder of K&F Consulting Inc., “Just not deleting anything off the computer isn’t enough.”
“The continued use of a computer can alter important metadata such as file system date and time stamps. Similarly, continued use can overwrite dynamic system data such as virtual memory stored to a disk, or overwrite deleted data so that it is unrecoverable,” he said.
Steps Fordham recommends include: early notice to preserve evidence – even prior to filing; preserving electronic evidence in a forensically sound manner that will capture the full spectrum of data; and developing a questionnaire or guide that seeks specific details about a clients electronic and computer systems.
According to K&F Consulting.
This blog is run by the authors of FindProtected.
FindProtected is a security program that allows you to search for password protected files. With FindProtected, you can effectively identify protected files containing sensitive data on your network.
Read more at Administrator
