Jackson Comany manufactures pet supplies for birds and cats. its top-level staff includes two accountants, a technology coordinator, a production manager, a warehouse manager N office manager, two sales managers, two assistants, and the CEO. The companys main offices and manufacturing plant in Los Angeles consist of an office building, a plant building, and two small warehouses. All buildings are connected via underground fiber optic cable. The servers,hubs, and routers are stored in the main office building.

The brain behind the IT network includes three server machines, named Washington, Jefferson, and Adams server host the Mixta accounting system, which processes all internal and external accounting transactions in real time.

A recent Audi by a regional accounting firm discovered six customer accounts that could not be traced back to real people.The auditors confirmations had been returned in the mail, marked Undeliverable and with Invalid Address stamps.To make things worse, all six accounts had been written off for nonpayment of amount ranging from $4,200 to $7,000. The discover was a complete surprise to Sandra Winger, the credit manager,because she always reviewed and personally approved all write-offs over $2,500. She was she that she had not approved any of these.

Sandra called in Tom Surefoot,a local forensic accountant, to investigate. She was sure that fraud was involved, and she strongly suspected that Betty Branco, one of the office managers, had somehow gotten into the accounting system and set up the phony customer accounts and had probably sold the written-off accounts on the grey market.Sandra was furious. I dont care how much it cost, Sandra told Tom. I want you to catch that woman. Im not going to let her get away with robbing me like that.

How could Gom apply computer forensics and other techniques to determine whether or not Betty Branco should be a suspect?