CASE STUDY 7: DATA RECOVERY

---

A computer forensics team was asked to assist an organization that had lost data as a result of a computer virus. The affected laptops were with field personnel and away from the central office when the virus was introduced. Consequently, the data collected over this period had not been backed up. The affected machines were brought to the team's secure laboratory, and, using forensic recovery techniques, they were able to image data from the affected machines, recover all of the data that had been stored since the machines had last been backed up, and eliminate the virus.

---