Matt Woods, the CFO of the New Green Car Company has contacted you for help with catching Brad Witts, the company's financial manager. Matt strongly suspects that Brad is somehow siphoning off company funds, but Matt has absolutely no theory Brad why is stealing. Matt indicates that Brad is always working in his office alone, preparing reports, paying bills, taking care of payroll, and so on. He works six days a week and has not taken a single vacation in the previous five years. He gets very touchy when asked any questions about his work. So, being suspicious, Matt asks Mary West, the company controller, to log in to the accounting system and review all of Brad's work for the last several weeks. However, she reports she cannot see anything unusual. New Green's accounting system is somewhat distributed. Parts of it are on a company-wide server, and other parts of it are on individual office computers. 

Required 

You have been called in as a consultant to investigate Matt's suspicion that Brad Witts is engaged in some type of misappropriation scheme. Develop an initial investigation plan that includes the use of digital forensics.