Law Enforcement

• Were you contacted by them?

• Should you contact them?

  • When should you contact them?
  • Why should you contact them (or not contact them)?
  • Are there conflicts with security and privacy policies?

• Is the goal criminal prosecution?

• Do you own the system being examined?

  • If not, can you examine it?
  • Do you need a court order?

• Will you lose control of the examination?

• Do you want to pass responsibility?

• Can you "disentagle"?

Notes: