Best Practices for Forensic Evidence Seizure

Robert BuheckerBest Practices

The employee has left, I suspect that they were involved with transferring trade secrets to a competitor. What do I need to do to protect the integrity of the evidence on the computer used? This is a common occurrence that happens everyday, and it is of tantamount importance that the evidence seizure and collection process follows some simple best practices.