“Just making a verified, hardware-level copy of all the bits, all the data that’s stored on the system is sufficient for almost all investigations that would have to be conducted,” said Spafford, who has assisted the FBI in cases. Independent investigations are common: According to the law firm BakerHostetler, well over half of the organizations it advises seek out private investigators to investigate hacks.
Such reviews are a comprehensive copy of what is on the machine at the time and include a replica of saved messages, network connections and active accounts. The backstory: Rather than turn its server over to the FBI, the DNC hired a private security firm, Crowdstrike, to investigate the hacking. Spafford, a professor of computer science at the Center for Education and Research in Information Security at Purdue University. “As we’ve stated before, we stand by our findings and conclusions that have been fully supported by the US intelligence community.”įormer FBI Director James Comey also told Congress in 2017 that CrowdStrike “ultimately shared with us their forensics from their review of the system.” “With regards to our investigation of the DNC hack in 2016, we provided all forensic evidence and analysis to the FBI,” the firm said in an emailed statement to The Associated Press. The DNC was first alerted to the hack by the FBI in September 2015. Instead, it reviewed a wide range of computer forensic evidence provided by CrowdStrike, which is common practice in such investigations. The DNC contacted CrowdStrike to respond to a suspected cyber attack impacting its network. The FBI never took physical hold of the DNC’s computer system. The company has identified hacks for major clients that also include the National Republican Congressional Committee and U.S. CrowdStrike is the private U.S.-cybersecurity firm that first helped the DNC identify the malware on its system in 2016 and later traced it back to Russia.
0 kommentar(er)
