Reference no: EM131295161
Forensic Accounting and fraud examination : CASE
Julia Katchum is in charge of the Eastern Regional Counterterrorism Computer Forensics Unit. Her recent investigations led her to believe that an imminent threat of a terrorist act in the Chicago area exists. She did not know much about the attack except that at least four terrorists were involved, and one of them had just made a phone call from inside the main offices of Stevenson and Barnes International Accounting Firm. Her immediate task was to proceed directly to Stevens and Barnes with an eight-person tactical team including a counterterrorism field officer to apprehend the suspect.
Julia’s primary mission was to search the suspect’s office and home computers and find any information that could help thwart the attack. It was though the attack could take place before the day was over.
When Julia and the CTU (counterterrorism unit) team arrived at the accounting firm, only the CTU officer went inside to avoid drawing undue attention. Inside, the CTU officer surreptitiously spoke to the security guard at the front desk and asked to be escorted to the office of the head of security. Once there, the CTU officer used the building’s surveillance cameras to locate the suspect who was in the center of a very large room full of staff accountants working in individual cubicles.
The CTU officer decided against sending in the entire team and to make the arrest alone. There was too big a chance that the suspect could see the team coming at him because of his position in the center of the room. If he saw them coming, he could have time to delete valuable evidence or to notify other terrorists.
The CTU officer worked his way through the cubicles in as casual a way as possible, but when he got half way to his destination the suspect seemed to identify him and began typing frantically on his computer. When the CTU officer realized what the suspect was doing, he ran the rest of the way and stopped the suspect by pressing his 10mm pistol into the side of the man’s head.
The CTU raided the suspect’s home at the same moment he was arrested. Just a few minutes later, the officer in charge of that raid delivered the notebook computer to John Dobson, CTU’s forensic accountant, as he was just beginning to look over the suspect’s computer in the Stevens and Barnes offices.
John noted the following facts:
• The suspect’s office computer had opened an instant messenger program. He could see a piece of a message written in Arabic.
• The battery in the home notebook computer was warm, even though it was turned off and not plugged in when it was seized.
What approach should John take in examining the two computers? What are some specific things that he should include in his examination?
Request: Please plagiarism free answer.
|
How the property of molecules change
: Effect of hydrogen bonding on physical and chemical properties of those molecules - how the property of molecules change if Hydrogen bond is not present in the molecule.
|
|
Calculate the change in the deferred income taxes
: Northern Corporation began operations in January 2011, and purchased a machine for $20,000. Northern uses straight-line depreciation over a four-year period for financial reporting purposes. Prepare a well-labeled table that reconciles pre-tax accoun..
|
|
Identify the challenges that each of businesses face
: Once you've created this list, identify the challenges that each of these businesses face as it relates to identifying market segments, managing consumer trust, ensuring consumer protection and adhering to any government regulations. Two to three ..
|
|
How many lights can he install
: He wants to use as many lights as possible but wants to limit his current drain to 500 μA to preserve the batteries.- How many lights can he install and still be under his current limit?
|
|
Forensic accounting and fraud examination
: Julia Katchum is in charge of the Eastern Regional Counterterrorism Computer Forensics Unit. Her recent investigations led her to believe that an imminent threat of a terrorist act in the Chicago area exists. What approach should John take in examini..
|
|
What type of soil is the majority for paradise ca
: For this question, type Paradise, CA in the "Address" box and click View. For the Area of Interest, draw a rectangle around the populated area of Paradise. What type of soil is the majority for Paradise, CA?
|
|
How did the organization create a guiding coalition
: How did the organization create a guiding coalition? Think about the change you are developing in your extended project. How will you create a guiding coalition? Who will you need to engage to ensure the change is successful? Why is it important ..
|
|
The exchange has commercial substance
: Southern company owns a building that it leases. The building's fair value is 1400000 and its book value is 800000( cost 2,000,000 - accum depre 1,200,000). Southern exchanged this for another building owned by the Eastern company. The building book ..
|
|
Evaluate strategies for communicating change
: HRM 560:Create a plan for minimizing possible resistance to your change management plan.Elaborate on the relationship between resistance to change and communication.Evaluate three (3) communication strategies.Recommend one (1) communication strategy..
|