Brad Berkshire and Russ Capps from Planet Data join Joshua Gilliland to discuss mobile forensics. Both discuss collection best practices, strategies, and how they would approach the following hypothetical:
Executive at start-up uses personal cell phone for work. Receives work email and personal. Executive is an active texter, who communicates with her family by text and business partners.
Executive is sitting at a stoplight when sideswiped by another car. Other driver is at fault. She takes photos of the damaged cars. One is texted to her husband that she is ok, followed by an email from her personal account to her insurance agent with a photo of the damage. Executive also emails business partners to say she was hit by a car and will not be in the office.
What is your collection strategy to only acquire data relevant to the accident? How would you not collect company confidential information? How would you collect potentially privileged data protected by the spousal communication privilege?