Home > Data Loss-Intentional

The Computer Forensics Professional has the task to find out the reason for which the crime has been committed. The important thing is that to analyze the situation of the crime and determine whether the crime was intentional or accidental. In case if the data loss is accidental, then the data recovery process should be initiated. The data loss can be due to many reasons. One among them is the intentional data loss. The intentional data loss can be due to the security failure.

The intentional crime committed by the criminal can lead to serious repercussions to the organization. The typical forensic procedures can be applied lead to the culprit eventually. The importance of the issue is based on the sensitivity of the information that is subjected to theft. There are several methods a criminal can use steal the data. It is possible that the user can copy the data and delete the original; or it is also possible that the criminal can copy the data only leaving the original intact.

It is also possible that the he has only read the data with out any copy. The data may be defense documents in which case the criminal memorize the information that can damage the interests of the country. To collect and present the evidence in different cases so that the criminal can be subjected to prosecution is a difficult task.

If the person has only read the file then to prove that he has violated the policies of the organization, a sufficient proof should be provided. Intentional criminal mindset can be from within the organization or even from the external sources. If the intentional crime is committed from inside the organization then the task of the professional is to limit the investigation to that organization only.

In case attack was carried out from external source then it may be difficult to nail the culprit, because the person can be situated any where in the world. The difficulty arises if the culprit is in some other country. The laws of that country and the pacts of that country with the home country should also be kept in mind. Some times it is possible that the other country where is criminal is based is not co operative. In such cases the Interpol laws and the conventions should be identified and needs to be applied effectively.

If the data is deleted then the data recovery process should be initiated. The recovery of data is an important task and in some cases is a large part of computer forensics. The data recovery process deals with identifying the loss of data. Intentional data loss can be more severe if the computer system is physically damaged. Physical damage may be due to fire, manhandling, etc.

If the hard disk drive is physically damaged then the task of the forensics team is to analyze the steps that can be taken to recover the data that is lost. It is also possible that the computer system is subjected to low level formatting. In case of low level formatting the data is erased completely and effect is such that the data is overwritten after the format.

In such a situation it is difficult to track the changes since all the data is lost. If the criminal is well aware and has taken the steps to clean the tracks then the task of the computer forensics expert is still more difficult.

Related Information:

0f data disk hard recovery is possible, click here to find steps involved.

Is it possible to retrieve outlook inbox after system recovery? Click here for more information.

Freeware tools for outlook express to recover deleted emails

Recover erased photos software available for download, click here.

NTFS recovery software for data recovery on ntfs partitions

Data Recovery Software - RAID Recovery

More Information
General Information
Hardware
Privacy
Network Forensic Tool
File System
Data Security
Data Analysis
Data Encryption
Data Remanance
Defense Establishment
Networking
Internet Forensic
Data Security
Crime Investigation
Services
Incident Response Systems
Physical Damage
Cyber Crime
Privacy
Impact
Log File Recovery
Advance Partition Recovery
Intrusion Detection System
Data Encryption
Ethics

Related Information
Data Recovery Tools
SCSI RAID
DLT Tape Drives
Business Performance
Software Industry