ITC597 - Digital Forensics Report: IP Theft Investigation & Analysis

This digital forensics report investigates a potential intellectual property theft by a contract employee, Bob Aspen, at Exotic Mountain Tour Services (EMTS). The report details the analysis of a USB drive found on Aspen's desk to determine if it contains proprietary information belonging to EMTS or Superior Bicycles, LLC. The investigation employs several digital forensics tools, including WinHex for recovering deleted images, stenography tools for uncovering hidden text within images, and ProDiscover for file recovery from the USB drive. The report outlines the methodologies used for data recovery, including the process of recovering corrupted images with WinHex, extracting hidden messages using stenography, and retrieving lost files with ProDiscover. The findings aim to provide a comprehensive overview of the recovered data and its relevance to the intellectual property theft case.