Pittsburgh, Pennsylvania
Digital Forensics Pittsburgh, Pennsylvania | Healthcare, Technology, and Defense Matters
Pittsburgh's medical centers, universities, and technology companies handle sensitive data on shared systems. When that data moves, the logs often explain how.
Discuss a MatterWestern Pennsylvania
Where sensitive data and mobile employees meet.
A researcher changes employers and a shared drive shows an unusual spike in downloads. A clinician's account is used from a device no one recognizes. A software developer leaves, and a code repository shows activity afterward. Each situation is common and each depends on reading logs, endpoint records, and cloud activity in the right order.
Rune Forensics can assist counsel with that kind of reconstruction in federal and state matters. The practice also reviews phone extractions and forensic reports for defense attorneys, treating law enforcement work with the same neutral, evidence-driven standard as any other.
Who benefits from review
Employment and intellectual property counsel, healthcare and university legal teams, defense counsel, and individuals in dispute with a former employer.
Frequent questions
Whether files were copied or only viewed, which device used an account, whether repository activity matches a departure date, and what a seized phone report actually established.
Typical work
Data movement and account activity, then devices.
- Cloud, repository, and shared-drive activity analysis
- Departing researcher and developer device review
- Account and authentication log interpretation
- Phone examination for defense and civil matters
- Independent review of an opposing examiner's report
- Clear written findings for counsel and the court
Steps
Reconstruct the movement of data, then explain it.
Capture logs and images
Relevant logs are exported and devices imaged with documentation.
Reconstruct events
Actions are ordered across systems into a defensible timeline.
Report
The report ties each event to a source and flags gaps.
Matters
Employment, intellectual property, and defense matters involving digital records.
Pittsburgh matter types
- Data and trade secret disputes
- Employee departures
- Criminal defense
- Healthcare-related litigation
- Personal injury
FAQ
Pittsburgh: questions before you start.
Can you tell the difference between viewing and copying a file?
Often, depending on the system and what logging was enabled. The report states what the available records distinguish and what they do not.
How do you treat a university or hospital's own investigation?
As another source to be read critically, alongside the underlying logs. It may be accurate, incomplete, or both.
What if the former employee used a personal device?
Counsel and the practice determine what can be examined under the circumstances, and how privacy and consent apply.
Consultation
Tell us what moved, where, and when.
A short summary of the dispute and the systems involved lets the practice advise on immediate preservation and propose a scope.
Pages that match: business forensics and email compromise, computer forensics, and independent forensic review.
Send a Brief Summary