A global software company suspected an ex-employee of accessing intellectual property following her exit from the company — but all they had was a “cleaned” laptop she had in her possession for a month following her resignation. The Unit 42 team investigated, using forensic tools and techniques, finding a trail of evidence. See what they uncovered and how in this case study.