View previous topic :: View next topic |
Author |
Message |
wetheridge Newbie


Joined: Dec 14, 2009 Posts: 4
|
Posted: Tue Dec 15, 2009 11:49 am Post subject: Uploading files to target computer |
|
|
I am currently conducting a forensic examination on a hard drive that contains CP. Several viruses were detected and the suspect had Limewire installed.
I am looking to gather information on the possibility the CP files had been remotely installed on the suspects computer without his knowledge.
wetheridge |
|
Back to top |
|
 |
Cyber_Da_Inv Newbie


Joined: Aug 08, 2006 Posts: 61 Location: Costa Mesa, California
|
Posted: Tue Dec 15, 2009 12:44 pm Post subject: |
|
|
A little more information is needed. What training have you had and what forensic tools are you using? Are you law enforcement? |
|
Back to top |
|
 |
wetheridge Newbie


Joined: Dec 14, 2009 Posts: 4
|
Posted: Tue Dec 15, 2009 12:55 pm Post subject: Uploading files to target computer |
|
|
I am former Law Enforcement, and have been through Access Data as well as other agencies. I am currently using FTK 2.2. |
|
Back to top |
|
 |
Cyber_Da_Inv Newbie


Joined: Aug 08, 2006 Posts: 61 Location: Costa Mesa, California
|
Posted: Tue Dec 15, 2009 1:32 pm Post subject: |
|
|
A little hesitant to offer assistance. Put my mind at ease and advise if you have a court order to be in possession of this CP media. Being former LE doesn't qualify, at least on my side of the continent. |
|
Back to top |
|
 |
PreferredUser Newbie


Joined: Jan 01, 2007 Posts: 1130 Location: USA
|
Posted: Tue Dec 15, 2009 1:55 pm Post subject: |
|
|
As a former LE I am sure you are aware of:
18 USC § 2252
Possession, distribution and receipt of child pornography (mandatory min 5 yrs for distribution or receipt; max 20 years)
18 USC § 2252A
Possession, distribution and receipt of child pornography (mandatory min 5 yrs for distribution or receipt; max 20 years)
That said what information on the computer makes you suspect the images were placed on the computer remotely? |
|
Back to top |
|
 |
wetheridge Newbie


Joined: Dec 14, 2009 Posts: 4
|
Posted: Wed Jan 06, 2010 9:46 am Post subject: CP Images |
|
|
There is nothing so far that leads me to believe that these images were downloaded to the suspects computer remotely. That being said, this argument is going to be made.
There are only 7 images and there does not appear to be any type of search to acquire the images. |
|
Back to top |
|
 |
wetheridge Newbie


Joined: Dec 14, 2009 Posts: 4
|
Posted: Wed Jan 06, 2010 9:50 am Post subject: CP Images |
|
|
Cyber_Da_Inv wrote: | A little hesitant to offer assistance. Put my mind at ease and advise if you have a court order to be in possession of this CP media. Being former LE doesn't qualify, at least on my side of the continent. |
I am in possession of discovery which has been provided by the courts. The CP images are in the possession of the computer crimes task force. |
|
Back to top |
|
 |
Cyber_Da_Inv Newbie


Joined: Aug 08, 2006 Posts: 61 Location: Costa Mesa, California
|
Posted: Wed Jan 06, 2010 2:33 pm Post subject: |
|
|
I can only say that I would be hesitant to make a SODDI defense argument without some offer of proof. That would go a long way to harm your reputation as a forensic examiner. |
|
Back to top |
|
 |
|