spacer

Tracing crime evidence

There is a huge market demand for forensic IT investigations. Combitech’s consultants have been certified to investigate matters such as industrial espionage, information theft and unlawful computer access at businesses.

5/30/2008 |

Forensic IT investigations can be conducted when an incident is suspected. There is no requirement for suspicion of a crime having been committed. Jerker Löf is the business area manager for Information Security within Combitech.
 
“We believe that this will become a significant service sector especially within the business world, and also amongst public and state authorities”, he says. 
 

The investigations often concern internal incidents that the client wants to settle.

 

“It might be Internet abuse or there is a suspicion that someone who has left the company has taken information in the form of drawings or databases. The company itself chooses if and how they wish to pursue the matter following a preliminary rapid analysis. By using our services they save a considerable amount of time”, says Peter Bayer, IT security consultant at Combitech.

Image: “We can do everything from simple log analysis to in-depth technical and legally correctly documented forensic detective work”, says Peter Bayer, IT security consultant at Combitech. Photo Carina Forslind.

Internal investigations can destroy evidence

An investigation can both point an accusing finger and give the benefit of the doubt. The problem is that sometimes companies destroy the evidence when they try to conduct an investigation on their own. One basic tip is to not execute any commands on your own. Combitech can provide telephone support and advise the client on what to do in order to avoid destroying any chains of evidence.

“We work to our own methodology which has been agreed with the Swedish National Criminal Investigation Department and the local Police authority. We are also able to provide expert help to solicitors and prosecutors in IT-related legal proceedings”, explains Peter Bayer.

Evidence is everywhere

Digital evidence is everywhere – in hard disks, USB memory sticks, network devices, firewalls, mobile phones and entry systems. Combitech offers both security approved premises and a modern fully-equipped environment in which they recreate information and secure evidence.

Contacts

Jerker Löf
0470-42531

Peter Bayer
0470-42358