Employee Forensic Evidence Collection
Due to a reduction in force, our client, a Fortune 500 web search and content provider, needed forensic collections and imaging performed on former employees’ computers.
Employee Forensic Evidence Collection Strategy
The client shifted from a previous provider to Celerity as we were able to provide the same service at a significantly lower cost. During a two-week period, Celerity imaged over 500 machines utilizing EnCase and a team of three forensic experts. In certain instances, on the approval of counsel, Celerity performed live acquisitions on encrypted hard drives to eliminate the need for the client to provide encryption keys. In addition, Celerity took steps to ensure the security and integrity of sensitive intellectual property, including preserving data that would not have appeared in the company’s most recent backup.
Employee Forensic Evidence Collection Results
After the initial preservation and collection effort, Celerity continued to support the client with other internal investigations and discovery matters.