Below are some of Mr. Rehman's previous forensics cases. In one case, an employee quit her job unexpectedly. Her employer was suspicious that she was over billing clients and pocketing the profits. An analysis of their Macintosh billing system revealed that, in an attempt to cover her tracks, the employee had deleted hundreds of patient records. Mr. Rehman was able to recover all of the deleted records.
Computers leave trails of their user's activity.
Mr. Rehman analyzed a computer for a company and discovered that an employee had been using it to do personal research using very expensive databases. In the examination of a computer used by a fired employee, Mr. Rehman found a detailed business plan that they had written. The plan was for a business to compete against their employer and included information about other employees that would quit to form this new company. A key employee of a large corporation left to start a competing business. Before leaving, he formatted the hard drive of his company laptop in an attempt to destroy evidence of violating a confidentiality agreement.