Sample Engagements

HR Dismissal & Document Fraud

Bank IT Employee used administrative access to acquire their HR performance review. Retained to pro

Two partners allegedly diverted funds from the insurance proceeds for damages sustained by Hurricane

Validated and recover lost financial data. All but 29 files of approximately 45,000 files were recov

Several years of research and reports were lost when the system was mistakenly reformatted. Safe Ha

One Partner in a business is alleged to have used known credentials to read another partner’s email.

Two Key Employees left an organization and took books of business. Forensic investigation showed th

A factoring deal financed one day before scheduled closing, with signed documents exchanged via emai

Employee was suspected of removing data using an USB thumb drive. SHD forensic team discovered comp

Disgruntled employee deleted entire directory, email, and part of a database. The deletion was not

Large firm required assistance in understanding the locations of possible information subject to an

Employee left professional service firm with client documents as well as emails, calendar, and conta

Aquired SATA drive and encrypted USB drive. Imaged to E01 and recovered data from unallocated space

Group within 125 person organization subject to a litigation hold. Safe Harbor Discovery worked wit