Computer Forensics | A Client Who Requested Computer Forensics to Respond to a Criminal Case

🔗Digital Forensics, or computer forensics, refers to the process of combining computer science and legal forensics to collect digital evidence in a manner admissible in court.

Beyond the level of data recovery, the important part of the process is securing evidence that can have effect in legal disputes in accordance with applicable laws and analyzing it scientifically.

Computer forensics proceeds through stages such as ▲data collection ▲data analysis ▲data review.

The most important aspect of computer forensics is maintaining the reliability and lawfulness of the evidence.

Because evidence that is altered or damaged during the data collection process may not be recognized as having effect in court, it is recommended to collect evidence with the assistance of an expert while complying with legal procedures.

Daeryun conducted a review of the messenger logs, emails, and documents on the client's computer.

We analyzed accounting software, Excel files, PDF files, and other materials to verify the transaction history, and we analyzed metadata such as the creation and modification dates of the documents to check for any manipulation.

We also searched for keywords related to the embezzlement in the emails and messenger logs, then analyzed and organized them to provide evidence that could be used in the criminal case.

Analyzing computer usage records makes it possible to determine who opened and modified which files, and when.

Daeryun began analyzing the computer usage logs to prove that the client had not manipulated the documents related to the embezzlement.

Through analysis of the ▲file access records ▲login records ▲network and remote access records on the client's computer, we provided evidence that could prove the client's innocence.

Daeryun provided assistance in determining whether there had been any attempt to conceal transaction records, by recovering deleted files from the client's computer and checking for any manipulated documents.

Daeryun proved that none of the transaction records, emails, or account transfer details had been deleted.

We also proved that no files or documents had been altered or forged, and by recovering deleted emails and other materials, we proved that there was no circumstance whatsoever pointing to the embezzlement charge.