Welcome to the ISFCE Toolbelt! Is this your first visit?
Tab Content
No Recent Activity
About Chetan

Basic Information

About Chetan
Full Name:
Chetan Raghuprasad
Standard Chartered Bank
Job Title:
Assosiate, Forensics and eDiscovery
Training & Professional Experience:
Associate in a specialist forensic & eDiscovery team, competent in providing digital forensics and eDiscovery services for the
Investigations of type Law Enforcement (Internal Shared Investigative Services), Regulatory, Compliance, HR and DLP matters across the
globe in Standard Chartered Bank.

Roles and Responsibilities

1. Identification and Scoping

Identification of data repositories in the Bank and the planning and agreement with stakeholders on a proportionate response to a particular matter.

2. Preservation

Assisting stakeholders with the preservation of data and advising on processes which will protect the data from being destroyed, altered or lost

3. Forensic capture

Forensic collection of custodian data which involves
. Creating and maintaining a physical chain of custody
. Perform forensic imaging of custodian computer hard drive using Guymager software in CAINE live boot USB, AccessData FTK Imager, EnCase, WinHex
. Perform forensic imaging of custodian iPhone provided by bank using Cellebrite UFED physical analyser
. Create the working copies of the Forensic images

4. Forensic Extraction

Extraction of custodian data in a defensible and auditable manner
. Extracting the mailboxes and user created files from the forensic image using EnCase
. Extracting data from iPhone image to Cellebrite UFDR report
. Extracting custodian emails from Bank's centralised email archival system using Discovery Accelerator

5. Processing

Processing of extracted data in eDiscovery platform to achieve the volume redundancy approach
. Ingesting the extracted data to Nuix / Autonomy HPeD platform
. Perform quality check, De-duplicate and OCR the eligible documents wherever necessary
. Apply the search terms across the electronic data set as per the requirements of the reviewers
. Provide the responsive data for review

6. Reviewing

Facilitating the responsive data for the review locally and internationally

. Setup the review in Nuix
. Setup the managed review in Autonomy HPeD
. Perform production of the relevant items mentioned by the reviewers
. Perform the Loadfile exports of the produced items
. Assist the reviewers by training them with the usage of the review platform

7. Computer Forensic Analysis

Analyse the working copy of the forensic image for evidence relating to a particular matter

. Proficient in performing recovery of deleted items, carving files, File Signature analysis
Internet artifacts analysis, Windows artifacts analysis and Windows Event log analysis.
. Proficient in performing the manual file recovery
. Perform the device profiling and timeline analysis
. Perform browser Forensics
. Malware Analysis

8. Reporting

To ensure that all scoping documents, extraction logs, evidence/chain of custody forms, working papers and audit logs are maintained.
Depending on the scope of work that FTI are providing the following are the options facilitated
. No report issued only working papers and audit logs will be saved on EIM
. A draft addendum to the Investigations report;
. A summary paper of work performed (where no report is necessary); and
. A separate FTI report which will follow the format of the Investigations report.

9. Operational Risk Management

. To ensure that the Forensic Technology investigation work always comply with the Bank's operational Risk framework
. Obtain necessary legal approval to access the custodian data
. Obtain Country cross border approval from Compliance to move the data across different countries.

Skill Set

Computer Forensic Tools: AccessData FTK, EnCase, WinHex, CAINE, SIFT workstation, Internet Evidence Finder
eDiscovery Tools : Nuix workstation, Discovery Accelerator, Autonomy HPeD, Clearwell, Digital War Room
Mobile Forensic Tools: Cellebrite


1. GIAC Certified Forensic Examiner (GCFE)
2. Project Management Professional (PMP)


Successfully completed ISFCE Certified Computer Examiner boot camp


Total Posts
Total Posts
Posts Per Day
General Information
Last Activity
May 31st, 2018
Join Date
July 5th, 2017