Case Study
Internal Investigations – Unauthorized Access to Digital Materials
Avalon | www.teamavalon.com 1 A confidential file was discovered on the desktop of a computer system that was in the possession of someone who did not (and should not) have access to the information in the file. The Challenge Avalon had to conduct a forensic analysis of a single computer system to determine the origination of a single file. The Strategy Avalon performed forensic imaging and examination to identify the means by which this file appeared on the desktop of the computer system in question. Avalon considered all possible ways a file could be transferred to a computer, such as USB installation, web access download, and cloud access. Avalon evaluated system artifacts that record files downloaded from the Internet, even if the user enables the privacy features that are i