Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 29 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Data Recovery/Law Stuff
Ethical Hacker Community Forums
December 01, 2008, 05:55:16 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Data Recovery/Law Stuff  (Read 1153 times)
0 Members and 1 Guest are viewing this topic.
BillV
Hero Member
*****
Offline Offline

Posts: 868


View Profile
« on: August 01, 2008, 03:07:50 PM »

So, I don't have a tremendous amount of knowledge in this area, so I figured it'd be best to seek some advice from you guys Smiley

My father-in-law referred his friend to me that needed some data recovered from a computer. Sounds simple at first. Upon further talking with both of them, I found out there is a little bit more to the story.

The guy with the computer (it won't boot; that's all I know.. I haven't seen it) owns his own business and runs it out of his home. The computer in question is used for his business, primarily for shipping and for Amazon stuff. He said there is a possibility that there may also be some family pictures and such on there, and also that is [ex-]wife may have originally purchased this computer, but it has always been primarily for business use.

Well, apparently the wife just decided to take the computer from the house the other day and hand it over to her b/f (supposedly with a little bit of tech knowledge). The guy with the business, got the computer back and since it will not boot.

Any suggestions on this? Should I even attempt to do anything with it? Will he have a case against this guy that supposedly has done something to the computer to cause it not to boot? I just wasn't sure if his first step should be to contact law enforcement or what.

Thanks.

BillV
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2380


Editor-In-Chief


View Profile WWW
« Reply #1 on: August 01, 2008, 04:01:40 PM »

It's his decision. If he wants to possibly press charges or file some kind of civil lawsuit, then he shouldn't ask you to do anything. If he decides he doesn't want the headache and just wants it to work again, then he pays you and you do it. There is no liability on your end.

You could also take an image of his drive if he ever wants to change his mind, but that is no guarantee that it will be admissible in court.

If you feel it is your responsibility to inform him, then the above is what you tell him. Be sure to reiterate that even though the work is technical, the decision on what to do is not. It is his personal or business decision to make.

Hope that helps,
Don
Logged

CISSP, MCSE, CEH, Security+ SME
dalepearson
Full Member
***
Offline Offline

Posts: 153


View Profile
« Reply #2 on: August 01, 2008, 04:40:25 PM »

I hope this isnt the case, but in the past I have heard of these things going horribly wrong. Once on investigating a machine for similar reasons, dodgy material was found on the HD's.
After a detailed forensic investigation it was proven this images where falsely inserted on the machine, and the HD had actually been swapped, hence the issues in the first place.

I am not trying to put you off helping anyone out and earning some ££, but if it smells abit then document everything, so if anything did go sour you are in the best position.

Its a shame these things always get complicated in splits etc.
Logged

BillV
Hero Member
*****
Offline Offline

Posts: 868


View Profile
« Reply #3 on: August 01, 2008, 10:36:39 PM »

Thanks for the replies and info.

Don, that guidance was quite helpful and exactly how I approached the situation Smiley

It sounds like he is certainly leaning towards filing a civil suit (this is also what law enforcement told him). If that is the case, does he just go straight to a lawyer who will in turn hook him up with a forensics investigator? Or should he be looking for his own forensics person/company?

In the event that he should be looking for a forensics person on his own, does anyone have any contacts in the Metro Detroit, Michigan area that I could refer him to?

Thanks again.

Bill
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.043 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.