A local authority brought a laptop to QinetiQ Digital Investigation Services in order to see if it contained any inappropriate material and evidence relating to suspicious overtime claims within a specific period of time. We were asked to produce any evidence found to a standard that would be admissible in a disciplinary tribunal.
An image of the hard disk was taken for analysis, ensuring that the integrity of the original evidence was maintained throughout the investigation.
Analysis revealed:
Items recovered from unallocated clusters, indicating visits to inappropriate web sites;
Emails and spreadsheets relating to overtime claims;
Pornographic thumbnail images saved within a "Commercial Off The Shelf" (COTS) software application.
A detailed technical report was produced for the local authority, which resulted in a satisfactory outcome.