看到「The curious case of the Raspberry Pi in the network closet」這篇有趣的過程，先從開頭與最後面開始看。首先是他們在辦公室裡面發現有個奇怪的設備：
追查後發現不是公司的人放的，最後發現是前員工放的，後來轉給法務部門處理了：
I checked the DNS logs and found the exact date and time when the Pi was first seen in the network. I checked the RADIUS logs to see which employee was at the premises at that time and I saw multiple error messages that a deactivated account tried to connect to wifi.
That deactivated account belongs to an ex employee who (for some reason) made a deal with management that he could still have a key for a few months until he moved all his stuff out of the building (don't ask..).
中間的過程還蠻有趣的，包括研究是什麼擴充卡 (以及用途)，然後從 SD card 上面挖資料，配合 Google 找線索，還有透過 WiGLE 定位，以及透過內部系統交叉比對，最後找到兇手...
然後發現是離職員工以搬東西當作理由，讓他在離職後還有辦公室鑰匙而導致的 XDDD