Case Study: a global technology company uncovers insider threat evidence with Palo Alto Networks Unit 42 Incident Response

a global technology company uncovers insider threat evidence in days with Palo Alto Networks

A global technology company faced a potential insider threat when a departing employee returned a laptop she had wiped clean after joining a competitor. Suspecting intellectual property theft and violations of a noncompete agreement, the company engaged Palo Alto Networks and its Unit 42 Incident Response team for a thorough forensic investigation.

Palo Alto Networks' Unit 42 team performed a digital forensic analysis, recovering evidence that the laptop had been connected to the competitor's network and that USB drives had been used to access proprietary files. They also discovered the use of TeamViewer software to conduct mass deletions in an attempt to cover tracks. This provided the client with proof of potential IP theft and data destruction, enabling them to pursue legal recourse.