Re: Computer Forensic - Research
From: J Barkwin (jbarkwin@yahoo.com)
Date: 12/19/02
- Next message: stig brahe sørensen: "Re: WinXP Pro - Lost admin pwd"
- Previous message: J Barkwin: "AD will authenticate any machine?"
- In reply to: stephen: "Computer Forensic - Research"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: jbarkwin@yahoo.com (J Barkwin) Date: 18 Dec 2002 20:00:31 -0800
Regarding the first part... it's a touchy subject in the States due to
strong privacy advocacy (which is a good thing) but the bulk of court
cases have found for the company; in that the company owns the
computer so they reserve the right to search it. Likewise, they own
the phone system so they are allowed to monitor it if they have reason
to believe it is being abused.
I am pretty sure you have to have a policy stating this in your
company new hire documentation.
I have heard that there is a rule of thumb in performing computer
forensics or in monitoring phone conversations that if you come
accross something that is personal and unlrelated to the
case/investigation, you should not continue listening/reading that
document/file/phone call.
"stephen" <stephenthornber@dsl.pipex.com> wrote in message news:<3dfc67ae$0$239$cc9e4d1f@news.dial.pipex.com>...
> Hello All,
>
> I am researching material for a Computer Forensics book based mainly on UK &
> European legislation.
>
> I think the sort of area I am considering are these -:
> -_-_-_-_
> Some one is reported as having broken company policy on their computer -
> maybe downloading Copyrighted material, or they have been seen to be
> browsing websites that contain illegal offensive or immoral material, they
> have sent an offensive / libellous / derogatory email to the boss......
> What does the MIS and IS specialist, network administrator, auditor,
> investigator need to do to prove the case?
>
> or Police forensic procedures
>
> or Police forensic evidence elimination - is it possible
>
>
> -_-_-_-_
>
> Please let me know of any questions that you may have that you think could
> be answered by such a book.
>
> Have you ideas for sources to research?
>
> What is your wish list for such material?
>
> thanks and all the best
- Next message: stig brahe sørensen: "Re: WinXP Pro - Lost admin pwd"
- Previous message: J Barkwin: "AD will authenticate any machine?"
- In reply to: stephen: "Computer Forensic - Research"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]