Cases which I have investigated in which the evidence has supported a successful analytical result include:
- Recovering documents deleted by an employee accused of embezzlement. These documents, which were purposefully destroyed in advance of the investigation, showed the amounts taken. E-mail in the case also provided evidence of kick-backs.
- Showing that employees who were accused of sending derogatory e-mails did not do so. In this case, the accuser had edited the e-mails to implicate the senders, and only the accuser's copies differed from those that were sent. By comparing copies of the e-mails on different computers it was clear where the changes had occurred.
