|
Forensic Services to Business and Corporations
INTERNAL SECURITY
|
PASSWORD AND DELETED FILE
RECOVERY
Employees are not computer experts, so important files are sometimes
misplaced or deleted by accident. We can usually recover those lost or deleted
files if those files have not been overwritten.
Safest recovery occurs when the operator
stops using the machine in question immediately upon discovering that
there has been an inadvertent deletion. Since the normal shutdown
procedure (MSWindows, all versions) may cause further deterioration
itself, we suggest that the operator merely stop using the machine and
immediately contact us.
|
|
UNAUTHORIZED OR INAPPROPRIATE WEB SURFING
An employee who
is web surfing for pleasure, on company time, can be costing the company
a lot in lost productivity. If that employee is accessing expensive data
services like Lexus Nexus, the cost can be even higher. Some employees
have even been known to run a side business right from their desk, using
the web and the computing resources of their employer.
Reactive Networking can quickly determine what
web sites have been visited, what files have been downloaded, and when
files were last accessed. A detailed report is then generated so that you
will know if your suspected employee is, or has been, abusing your
electronic equipment.
SECURITY HOLES AND THE THEFT OF YOUR
INTELLECTUAL PROPERTY
You may have
spent Thousands of dollars securing your network, only to have your
employees opening ports to get around your firewall policies merely to
gain access to a tune, or chat with a friend. While employee ignorance is
usually the reason for opening a "backdoor", the threat of an
open "backdoor" to your firm is very real. Hackers constantly
troll for these entrances to corporate networks. If they find an unprotected
open port they can possibly cause real damage to your corporate web site.
They could possibly steal your employee's personal information, or your
valuable intellectual property, or even your customer's credit card
numbers. Reactive Networking will seek out and slam shut all of the
hidden "backdoors" to your network.
One of the largest security holes you face is
the former employee. An employee who is disgruntled, or expects to be let
go soon, is in an ideal situation to steal your intellectual property, or
sabotage your network. Reactive Networking can recover changed passwords,
and uncover evidence of data theft or the implementation of a hidden
"backdoor" into your network.
OTHER SEVICES
MISUSE OF COMPANY COMPUTERS
Sometimes the activities of an employee will cause the firm to consider a
legal response. Employees may be committing criminal acts using company
computing assets. Crimes having to do with child pornography, theft,
sexual harassment, blackmail or embezzlement are just a few of the crimes
that may be being committed through your firm. If that is the case, you
need to discover it and stop it immediately. If the crime is being
committed against another using your company's equipment, your firm could
well be held liable in a civil suit. Again, you need to discover it and
stop it immediately to limit your liability.
A forensic investigation can uncover things that perpetrator's do
not realize are available to a forensic technician. Deleted files can be
recovered. E-mail is extremely difficult to completely remove from a
computer, it is usually recoverable. Also, E-mail is often backed up on
tapes or on the companies mirror servers and is generally kept for months
or even years. An investigation might uncover attempts to fabricate,
conceal or destroy evidence, and the mere attempt to fabricate, conceal
or destroy is a red flag demanding immediate action.
The information contained on the hard disk drive of a server or
desktop computer may also show that a employee has been attempting to
enter into, or copy a file from a secure network area, or has already
copied a sensitive file to a portable media like a floppy, a CD, or sent
it out as an e-mail attachment. Reactive Networking has the experience
and ability to discover computer crimes, and will maintain the chain of
custody requirements demanded by the rules of evidence so that if the
decision is made to seek a criminal indictment, the electronic media and
the evidence it contains, will be admissible in court.
|
