 |
PRESS
RELEASE: 06-26-02
|
 |
FOR IMMEDIATE
RELEASE
CONTACT:
Mark McLaughlin
Computer Forensics International
(310) 277-0660
mjm@cf-intl.com
Businesses
Routinely Use Computer Forensics
Employed In Westerfield Murder Trial
Los Angeles,
CA - June 26, 2002 - A picture or private email you think is deleted
from a computer is probably still there and could be recovered using
the latest in forensic software.
"We use the
same forensic techniques that were used to recover child pornography
from accused murderer David Westerfield's computers. It's common for
businesses to defend sexual harassment or wrongful termination claims
by examining the accuser's PC", says Mark McLaughlin, Computer Forensic
Examiner and Expert Witness.
When a user
presses delete, the computer only removes the first character of the
filename, still leaving the original file intact on the hard drive.
Overwriting, or copying a new file over deleted data, is the only way
information is destroyed. But even then, some fragments could remain.
"We're always
in search of the smoking gun. And if it's there, we'll find it", he
adds. There's even hidden areas of data most computer users don't even
know about which contain snapshots of everything viewed, written or
printed. Forensic software allows experienced examiner's, like
McLaughlin, to search large hard drives for the presence of specific
words, telephone numbers, emails or visited websites.
Mark McLaughlin has
amassed nearly 25 years experience in computer forensic analysis,
corporate security investigations, information systems management and
law enforcement. He's a frequent lecturer and California State Bar
qualified instructor for attorneys on computer forensics.