Hello, new to the forums.
I have an ongoing investigation that involves about 3 laptop computers hooked up to a switch/router/modem and a couple of desktops. Some illegal activity was present on one of the laptops on the wireless network. However, that hdd has been completely destroyed. Just curious up front if any evidence of illegal images would show up on the other PCs. We are in the processs of getting those examined. I am assuming that the only evidence would show up on the PC tied to the activity. This is just a simple home network with a 2wire router. No kind of servers or real firewall logs, etc. Too bad the hdd platter has been literally shattered. Local law enforcement cannot afford the costs of magnetic force microscopy or anything further. Anyone know if we will be lucky enough to find anyting else on the other PCs? The only thing i can hope for is if the files were thrown in a shared file somewhere on the other PCs. Thanks in advance. (we are sure none of the other PCs were actually used to access illegal info as they are not his PCs)
R Willis
Hi,
Unless files were transferred it is unlikely that you will find anything, but it’s always worth looking at those computers. If the hard drive was destroyed the only thing you could possibly get him on is wilful destruction of the laptop; provided it was company property.
Alan
Welcome to the forums.
Where do you work at?