Illustrative Scenario: Intellectual Property Theft Investigation
Suppose a company suspects that data was taken when an employee left. Examiners would analyse the computer, its USB connection history and cloud transfer logs to find when and how files were copied.
The Challenge
A software company finds its source code circulating without authorisation after an employee leaves.
Forensic Approach & Methodology
Examiners would make preserved copies of the assigned hardware with the computer switched off, then analyse link files, shellbags and removable-storage records to show when files were opened and when external drives were connected.
Outcome & Impact
What an examination could establish: The sequence of file access and external media events, documented on a chain-of-custody record for legal counsel.
Start with a
confidential conversation.
View Park Towers, 20th Floor, Nairobi
+254 701 543 158
Monday–Friday 08:30–17:00 · Saturday 10:00–14:00
Remote consultations available on request.
Please don't send case details or evidence until we've agreed a secure way to receive them.