Faster than a speeding bullet: Geolocation data and account misuse

Collecting and presenting digital evidence to support an administrative investigation can make or break the case against the accused. Many companies have policies and procedures for collecting evidence on computers that they have legal authority over; few have procedures for collecting evidence from external sources over which the company has no lawful authority. This paper recommends practical techniques for how best to collect, store, and present digital evidence that was discovered on a social media site or service that lies outside the authority of the company, so that legal affairs and human resources will accept it for use in administrative action against a misbehaving employee.