IntaForensics were instructed by a large firm of Solicitors to assist in a criminal dispute in relation to the ability of their client to open
a document sent to them via email.
The client claimed that they could not open the document due to a lack of compatible software on their computer at the time of receipt. This fact
was absolutely critical in relation to the investigation.
IntaForensics attended the Solicitors practice and secured the computer in question. The computer was transported back to IntaForensics were it was
placed into secure storage.
An IntaForensics analyst then created a Forensic Image of the computer using specialist tools. A Computer Forensic Analysis was then performed on the
computer.
An analyst confirmed that the client did not currently have the capability to view such a file. However the analyst was able to recover
a partition that been deleted more than 6 months previous. Following further analysis of the deleted partition a fully functioning piece of
software that was capable of opening the attachment was found.
A report was produced by the analyst detailing the findings including the pertinent fact that the partition, and therefore software, had been
deleted from the computer the same day that the email had been received. The defendant entered a plea of guilty.
