Infosec Europe 2008
Infosec Europe 2008

Infosec: IT lawyers missing a trick

Accurate hard drive mapping could be crucial in court

Written by Iain Thomson at Infosec Europe 2008

If you image the hard drive you do not have to trust what they give you

Alan Philips 7safe

Lawyers relying on the disclosure of computer evidence are losing out on valuable clues, experts warned today.

When documents or emails are requested as part of a court case, many legal firms accept CDs with the requested material burned on.

However, a computer forensics firm has warned that this misses crucial evidence contained on the rest of the hard drive.

"If you take a burned CD you just have a lot of documents," said Alan Philips, chief executive at 7safe.

"What you lose is information on the documents themselves and where they have been. If you image the hard drive you do not have to trust what they give you."

Philips explained that the legal profession should learn from the police and take complete hard drive scans. These show what documents have been deleted and, crucially, where they have been moved.

A scan can also trip up the less savvy, since there is still a widespread opinion that simply deleting a file erases it completely. Only the header information is deleted and a skilled investigator can find the file easily.

A key driver, however, is cost. Investigators are expensive but, in a multimillion pound case, it could be a price worth paying, according to Philips.

Further reading

Infosec Europe 2008 Special Report

The latest news and views from Europe's number one information security event   More...

Infosec Video Lounge Part 1

Infosec 2008 Preview: Ed Gibson, Chief Security Advisor at Microsoft UK, talks to vnunet.com about the security focus for the coming year.   More...

Infosec: IBM offers 'security-as-a-service'

Big Blue bundles for SMEs   More...

Infosec: Rock Phish threat deepens

Hugely successful malware gets a new twist   More...

Related articles

Infosec: SafeNet calls for tougher data laws

UK organisations need to face up to £1.5bn ID fraud problem   More...

Infosec: Security pros 'ignoring' their own message

Four out of five laptops ripe for theft at Infosec show   More...

Infosec: Reputation driving information security

Security is now everyone's problem   More...

Infosec: Security community must work together

Police cannot do everything, says Microsoft UK security chief   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement