Lighthouse Forensics

Even your grandparents can use a computer thanks to his efforts.

All the power and wireless connectivity of Raspberry Pi 3B+ in a smaller form factor. Find out more: https://www.raspberrypi.org//new-product-raspberry-pi-3-m/

OUR CHILDREN AND THE INTERNET INTERNET SAFETY Children are starting to use the Internet and computers at a younger and younger age every year. Because they are often trusting, naïve, curious and eager for attention and affection, predators will target them online in order to take advantage of them....Continue reading

Computers record large amounts of information about user activities that are useful, if not crucial, in employee investigations. Both applications and the operating system record relevant information, sometimes in more than one location. Because of this, computer forensics can trace the steps used by a misbehaving or dishonest employee to provide you the evidence needed for fair and resolute decisions. Typically, the issues involve: Whether an employee suspected of not perfor...ming his work, or performing other conduct not allowed under company policies, is guilty of your suspicions. Much of this evidence is difficult to eliminate. A computer user that wishes to cover his tracks can clear some of this information, but some subjects are careless, unsophisticated, and/or surprised by your investigation. However, even crafty and sophisticated people will have trouble eliminating everything. Even the act of eliminating information will leave tracks. What you can find on your employee’s computer hard disk When dealing with those crafty and determined people that think they can cover their tracks, the magic of computer forensics is well worth its cost. A forensic image of a disk is a bit level copy. It includes all information on the disc regardless of whether the computer operating system recognizes the data as an existing file. In most investigations, here is the type of information you will receive: Deleted files (or portions thereof) that remain on the disk because subsequent activity has not yet overwritten them. A listing of deleted file names, even if the files themselves cannot be recovered. This is useful in showing use of unauthorized programs, or files with suspicious names. Internet sites visited, regardless of the browser settings or deletion of the browser history. This information is stored in hidden system files, parts of the Windows registry, and as remnants of web addresses that remain in unoccupied file space. Information and graphics from internet sites visited (we often find images that are clearly against almost every company’s policies).The existence of suspicious applications, or the fact that they were used. Examples of troubling applications are those used to transmit files, communicate with unauthorized remote computers, prevent data recovery, crack passwords, encrypt files, or perform computer hacking. Information remaining in swap files, page files and other temporary Windows files. These files generally show what the user was working on recently, even if not otherwise saved.Information contained in hidden and password protected files from just about any well-known file type. Lighthouse Forensics can sort and search computerized text and numeric data. This allows the investigator to find information rapidly, using key word searches.

Digital evidence is everywhere. Electronically stored information and electronic communications are pervasive and, contrary to the assertions of many, extraordinarily difficult to completely eliminate or obfuscate. The devices that so many of us use every day are pulling email from servers, synchronizing with our computing environments, and creating multiple redundant backups of our accounts and data locally or in the cloud. Countless other facilities, mechanisms, and fac...Continue reading