How might an anonymous logon affect a computer forensics investigation? The biggest risk of anonymous accounts is that they allow anyone access to the system. In some cases, the default access granted to these accounts allows them to access data that they should not have access to view. From a forensic standpoint it can make it almost impossible to trace who actually logged into the system and will be time consuming and hard to prove.
What are the possible implications of shared logons to digital forensics investigations? The possible implications to digital forensics that would be associated with shared logons is that it would make it easy to plant digital evidence on an unsuspecting user’s account and help cover someone else’s tracks. And if you suspect a user of wrong doing, the user can claim that the account is a shared account and that anyone could have done what they were suspected of doing.
