Overcoming Reasonable Doubt in Computer Forensic Analysis

摘要

In the early 1990s, a multi-national corporation suffered economic espionage (or, more accurately, economic sabotage) and risked the loss of $3 billion in future revenues. After an internal investigation, engaging the FBI resulted in what might be called a tidy conclusion. We won't go into any details of the indictments, penalties, or prosecutions that may or may not have resulted, but we will discuss the "sources and methods" leading to the tidy conclusion and additionally we will in post mortem attempt to apply the logic reasoning techniques discussed in the CSI-5 Field Notes course.