Imagine a difficulty in the workplace. An employee is fired. Years later:
Q: How can factual information be gathered to make a decision in this case?
A: Save a forensic image of the computer used by the employee before it is reused, recycled or lost.
A policy of imaging computers or just archiving, cataloging and securing hard drives is inexpensive and effective. We like the Ditto hardware for making forensic images.
PS: The same strategy is also effective for employer-owned phones.
Five employees of the county falsely sued claiming discrimination. County email backups were available. eSleuth was retained to produce evidence from available sources. We created a forensic image from county computers. Even evidence from a fax machine became important.
The jury decision recognized the truth and gave nothing to the plaintiffs.