The Things know What You Did Last Session

Investigating Physical and Digital Enterprise Threats

Corporate threat investigations routinely span physical hardware manipulation, digital forensics, and international cybercrime schemes. Investigator Will Baggett shares real-world case studies from complex internal inquiries.

Automated Hardware Timecard Fraud

In a bizarre fraud scheme, an on-site contractor engineered a robotic device with synthetic flesh to automatically press a biometric fingerprint reader daily on a hidden iPhone, faking physical attendance on corporate visitor networks.

Chip-Off Extraction of Voting Machine Hardware

Baggett details IoT forensic investigations involving chip-off flash memory extraction from prototype voting machines, demonstrating hardware extraction techniques used for national security assessments.

Hunting North Korean IT Worker Fraud Networks

Investigating remote IT contractor networks revealed North Korean operatives utilizing piKVM switches, VPN routers, and virtual machine tunneling to bypass enterprise identity verification and funnel earnings back to DPRK state operations.

Forensic Indicators and Mitigation Strategies

Detecting contractor fraud requires correlating network telemetry, analyzing device fingerprints, monitoring anomalous VPN connections, and conducting rigorous identity verification interviews.