 If
you suspect that a computer may have been used for an
inappropriate purpose or to commit a crime, you should take the
following steps immediately:
Make precise notes of the following:
- Date and time
- Persons present
- Exact location of the computer
Status of the
computer
- Power On or Off
- ScreenSaver in use
- Programs open
Attachments/Peripherals
- Blackberry
- Treo
- Palm Pilot
- Printer
- Scanner
- Backup hard drive
 If
possible, photograph the computer and surrounding area.
Secure the room in which the computer is located.
DO NOT OPERATE THE COMPUTER
DO NOT ALLOW YOUR I.T. PERSONNEL TO
TOUCH THE COMPUTER
CONTACT A COMPUTER FORENSIC SPECIALIST
AS SOON AS POSSIBLE.
REMEMBER: The computer and
its attachments may be a “Crime Scene”. Just like a
traditional crime scene, the computer should not be
disturbed in any way and extreme care must be taken to
preserve and record evidence
|
