Data protection is important, critical, vital. Loss of data can play havoc in many ways. It can be disastrous. Cybercriminals steal data, use that data for stealing money and for conducting further breaches. Loss of data affects privacy and security.
When a Machine is plugged in an organization premises and does not belong to the organization. The organization may reserve the right to confiscate the machine and search it in the same premises. Following are the list of possible ways and the tools on which compromised data can be identified from a WORKGROUP / NON Domain machine which has been confiscated