Tag Archives: evidence

Investigator Dave is examining the corporate evidence drive taken from the desktop computer of “John A. Suspect,” who is assigned the user network logon identification of “jasuspect.” In investigator Dave’s report, he states that “the user, John A. Suspect, performed a specified action on the computer because an event log showed that the user had accessed the file…” (more…)