Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 49 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Data Recovery/Law Stuff
EH-Net
May 24, 2012, 11:50:29 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Data Recovery/Law Stuff  (Read 3213 times)
0 Members and 1 Guest are viewing this topic.
BillV
Hero Member
*****
Offline Offline

Posts: 1830


View Profile WWW
« on: August 01, 2008, 03:07:50 PM »

So, I don't have a tremendous amount of knowledge in this area, so I figured it'd be best to seek some advice from you guys Smiley

My father-in-law referred his friend to me that needed some data recovered from a computer. Sounds simple at first. Upon further talking with both of them, I found out there is a little bit more to the story.

The guy with the computer (it won't boot; that's all I know.. I haven't seen it) owns his own business and runs it out of his home. The computer in question is used for his business, primarily for shipping and for Amazon stuff. He said there is a possibility that there may also be some family pictures and such on there, and also that is [ex-]wife may have originally purchased this computer, but it has always been primarily for business use.

Well, apparently the wife just decided to take the computer from the house the other day and hand it over to her b/f (supposedly with a little bit of tech knowledge). The guy with the business, got the computer back and since it will not boot.

Any suggestions on this? Should I even attempt to do anything with it? Will he have a case against this guy that supposedly has done something to the computer to cause it not to boot? I just wasn't sure if his first step should be to contact law enforcement or what.

Thanks.

BillV
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 3916


Editor-In-Chief


View Profile WWW
« Reply #1 on: August 01, 2008, 04:01:40 PM »

It's his decision. If he wants to possibly press charges or file some kind of civil lawsuit, then he shouldn't ask you to do anything. If he decides he doesn't want the headache and just wants it to work again, then he pays you and you do it. There is no liability on your end.

You could also take an image of his drive if he ever wants to change his mind, but that is no guarantee that it will be admissible in court.

If you feel it is your responsibility to inform him, then the above is what you tell him. Be sure to reiterate that even though the work is technical, the decision on what to do is not. It is his personal or business decision to make.

Hope that helps,
Don
Logged

CISSP, MCSE, CSTA, Security+ SME
dalepearson
Sr. Member
****
Offline Offline

Posts: 356


View Profile WWW
« Reply #2 on: August 01, 2008, 04:40:25 PM »

I hope this isnt the case, but in the past I have heard of these things going horribly wrong. Once on investigating a machine for similar reasons, dodgy material was found on the HD's.
After a detailed forensic investigation it was proven this images where falsely inserted on the machine, and the HD had actually been swapped, hence the issues in the first place.

I am not trying to put you off helping anyone out and earning some ££, but if it smells abit then document everything, so if anything did go sour you are in the best position.

Its a shame these things always get complicated in splits etc.
Logged

BillV
Hero Member
*****
Offline Offline

Posts: 1830


View Profile WWW
« Reply #3 on: August 01, 2008, 10:36:39 PM »

Thanks for the replies and info.

Don, that guidance was quite helpful and exactly how I approached the situation Smiley

It sounds like he is certainly leaning towards filing a civil suit (this is also what law enforcement told him). If that is the case, does he just go straight to a lawyer who will in turn hook him up with a forensics investigator? Or should he be looking for his own forensics person/company?

In the event that he should be looking for a forensics person on his own, does anyone have any contacts in the Metro Detroit, Michigan area that I could refer him to?

Thanks again.

Bill
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.114 seconds with 23 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.