What makes up an investigatory process how does each part dependent to each other?

Answer 1

However every investigation started with the assumptions kept in mind.But to me as a Cyber crime investigator , it starts immediately , when some one hired me for the

Investigation.

WHY ME?

Becoz it's private and confidential.

Steps:

1. Cease the room , where the device was installed (PC/SERVER/DATABASE/TAPE DRIVE and so on.

2. Prepared a Brief list carefully abt. every evidence & digitized it .

3. Collect the Evidences carefully , becoz these are senstive in nature and might damage the whole device.Always wear gloves becoz humans possess static current

Which is capable of altering the evidence.Do not use plastic covers instead use wooden blocks for evidence collection and close them with atmost care .Match every item before closing them/ceasing .

4. Talk openly with the cutomer , what ever is stolen .

5 check the logs for reverse attack aggressively before the hacker cleans the logs.

6Enable a mirror log for next time , lure him by using honeypot.

do's

Call the police , if the case is associated with terrorism.

investigate every employee about the activities which are unusal from the routine.

Try to reverse attack asap .

dont's

If the case comes under federal or State level. do not interfere becoz the think oof the state and country not your personal interests.

It takes long time to investigate these type of cases and huge money to spent.so if the loss is not much , never call the police or hire a investigator.

their are no cyber laws specifiied by govt.

95% are kids , just do it for fun.

3% are doing it intentionally but never prosecuted due to lack of evidences.

2% you never caught them , but we can.

Regards

Gurbinder Sharma