Build the account from recorded activity.
File-access logs, USB connection history, cloud uploads, email attachments, and post-departure access can help establish what happened to proprietary information. Preservation matters because those records may be changed, deleted, or rotated.
E-Hounds works on matters under the Defend Trade Secrets Act, Florida Uniform Trade Secrets Act, and Computer Fraud and Abuse Act, for plaintiffs and defense counsel. We acquire, analyze, and document the available evidence, then explain which conclusions it supports.
Connect the source, transfer, and recipient.
Acquisition
Forensic imaging of corporate workstations, laptops, and mobile devices, cloud-account exports, and preservation of logs across the relevant environments.
Exfiltration paths
USB history, cloud-upload events, email attachments, print activity, and file-access timestamps compared with the period of suspected misappropriation.
Recipient-side examination
Where discovery provides access to a new employer's systems or personal devices, we examine them for the relevant files, matching artifacts, modification traces, and derivative works.
Expert declaration and testimony
The analyst who performed the acquisition and analysis can prepare a declaration, sit for deposition, and testify at trial or an injunction hearing. The methodology is documented for independent review.
When access comes from outside the business.
Our corporate espionage work has included sophisticated external actors, foreign-state activity, and coordinated supply-chain compromise. These matters require attention to access paths, source limitations, and sensitive handling.
We scope that work with counsel and coordinate the handling of sensitive sources and findings.
Scoping the engagement.
Describe the suspected transfer, the people and systems involved, the relevant dates, and the records available for preservation. Include whether the matter involves a departing employee, another insider, or external access.