Employee was suspected of removing data using an USB thumb drive. SHD forensic team discovered computer used, type of thumb drive, and was able to make an affidavit sufficient to subpoena employee’s home systems. 100% of data recovered and SHD was able to conclude with reasonable certainity that the data was not transferred beyond employee’s home computer.