Obviously when searching indexes for keywords, knowing your case or client will provide the best search results, but what about those keywords that probably should be searched in ALL cases. The generic hints that someone is up to no good. I read an article about a company searching for words like "regret" … Does anyone have such a keyword list? Any ideas? Would you like to brainstorm and compile one? Thanks, B
If you were to search for words that that the client didn't provide to you and you were doing it at $300-$500 or more an hour, you might find yourself without future jobs.
If you were to search for words that that the client didn't provide to you and you were doing it at $300-$500 or more an hour, you might find yourself without future jobs.
That sounds highly unlikely, especially if you were given a bunch of data and were told to "find something."
That sounds highly unlikely, especially if you were given a bunch of data and were told to "find something."
I think what he means is no one wants to pay for something they didn't authorize. If you are told to search for a list of 30 keywords and you do those PLUS another 30, the client isn't going to be too happy paying for the time on those additional 30 keywords.
When the examination isn't keyword specific, the subject of the examination is known (theft, policy violation, etc.) and you'll have a direction of where the exam is going and the time it will take.
I have never had a case, public or private, where someone has asked me to just "find something." If they did, I probably wouldn't take the case until they could be more specific as to the purpose of examining the computer. But that's just me in my little corner of the US of A. If things are different on another part of the globe, I guess you'd have to roll with the punches.
Pornography cases "pop out" at you… Other cases involving theft, fraud, etc work well with keywords relating to the victim, suspect, product, information stolen, etc… But sometimes people talk to in code. "You know that thing I told you I would send you a copy of???" or "I regret what its is that I did" And as many keywords as you have relating to what it is you are looking for aren't going to flag anything.
As I stated I read an article about recovering such "coded" emails and files with keywords like "regret." How often is regret used? Rarely. At least rarely enough to review any flagged file.
Hope that helps explain what I was looking for. As for the $300-$500 an hour… I work for myself on my own cases, so its my wasted time. )
