The scope of the investigation has been established, and you know that company polices clearly state the expectations for acceptable use and privacy. Management agrees that you should analyze the computers and surrounding work spaces for two employees. Describe in detail the digital investigation process, and include the following steps:
Preparing for an investigation Processing the scene Collecting evidence Processing evidence Reporting findings As part of your description, describe in detail the tasks that you plan to perform for steps 1 (preparing for an investigation) and 2 (processing the scene). Also, note that management wants to keep this investigation as quiet as possible and wants no one outside of the investigative team, management team, and human resources team to know that this is taking place. They are particularly keen to make sure that the two suspected employees do not know that this is taking place.