What have you been up to recently? Rapid employee misconduct investigations.

Conducting initial investigations of employees within a corporate environment should be quick and non-invasive to have minimal impact on the employee and the organisation. Remote logical acquisitions of computers as well as access to cloud storage and logs can allow a very quick triage to determine if more in depth investigation in needed and may even provide all information that is required. Jon Khong, from Virdos Lima and Matthew Simon,  will explore some scenarios to show how an investigator can determine previous actions on a target system, from IP Theft to misuse of resources.