Some Concerns
This type of teamwork is not perfect. One of the most important things to keep in mind while working with system administrators and others who might be reporting a high-tech incident is that they might have already taken steps on their own to investigate or clean up a case. These can interfere with the case if the information is not disclosed. A way to prevent this is to always ask what steps the reporter took before and after noticing the incident.
The amount of pre-work performed by the reporter varies greatly, depending on the target of the crime. In corporate computer cases, the person in charge of the security of the system usually does a significant amount of investigating before reporting the issue to corporate security. ...
Get HIGH-TECH CRIMES REVEALED: CYBERWAR STORIES FROM THE DIGITAL FRONT now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
