Computer forensics is the technical examination of computer and IT systems to recover information to a standard which is legally admissible in Court proceedings. The techniques used will recover deleted documents and emails, which will often include incriminating evidence. Masses of data can be quickly searched, indexed and cross-referenced and used to support the overall investigation.

Computer Forensics is used at some stage in almost every corporate fraud investigation conducted by Haymarket. However, Haymarket also provides computer forensics as a stand-alone product. For example, many law firms retain Haymarket to forensically image computers during the execution of Court Search and Seize Orders.

Example

A client received information that a Regional Sales Director was passing sales leads to a recently formed competitor organisation. As part of the ensuing covert investigation, Haymarket took a covert forensic image of the suspect's company laptop computer. Analysis of recovered, deleted files revealed a number of documents passing confidential sales information to the competitor. In a subsequent interview, the Sales Director initially denied having passed any information to the competitor. However, once confronted with evidence obtained from his computer, he admitted that he had accepted an offer to join the competitor organisation, but had agreed to delay his departure in order to assimilate sensitive information, and to pass sales leads.