The Case of the Mad_Boomer, an Employee Investigation.


In an effort to gather information on any wrong doing, I employed the use of forensic analysis software.
EnCase is a GUI based program that has ported its code to almost every OS imaginable, MS Windows, MAC, and varoius flavors of UNIX.
The power of the program rests in its ability to do advanced searches through the file system (GREP, where is can parse the contents of a file) as well as through the slack space on a harddrive.
This software is a standard lawenforcement tool that is used in the analysis of a computers harddrive.
Used in both civil and criminal cases EnCase Ver 3 has "passsed the bar" as it is being accepted in courts across the nation.
The costs associated with this software (Corporate: $2,495.00) will easily be mitigated by the costs associated with employee bandwidth misuse and potential civil / criminal liabilities.
Below is a complete list of search terms I conducted with some hyperlinks to screen shots or reports issued by EnCase in tabular format.
NB: Some of the search terms either came up empty or were psudo-relavent, thus I've excluded the results of those searches.


Click here for complete SEARCH LIST.


Use the back button in your browser to get back to this page after viewing the search results.
fire (websearch conducted by boomer) exp[A-Z] (research into chemistry conducted by boomer) bomb (screenshot of EnCase results)
boomer production (Chemistry Theory, a file owned by Boomer) amature
payment secret 11/22/99
hate women burn (Terrorist file owned by boomer)
jpeg (EnCase summary of bad pictures found on Harddrive) waco species (webpage found on Boomers harddrive)
mdma production yield


As we can see Boomer is up to almost everything bad under the sun, so much so that I considered that he perhaps is being set-up. However upon review of the filedates and his obvious attempts to delete evidence, I feel we have or man. He is involved with Terrorist Bomb Making, selling information via AOL while at work, clandestine drug manufature as well as numerous other nefarious things.

In view of the evidence found, it is recomended that Boomer be terminated.
This decision is in accordance with the rules and regulations Boomer signed upon his employ with SpaceBound.
If the Security Incident Response Team (S.I.R.T.) can provide any clearification or information for the Board, please let them know.


created: Brian F. McGarry
Updated: 02:31 p.m. EDT (1831 GMT) April 17, 2003