Uploading files to target computer

[wetheridge]

I am currently conducting a forensic examination on a hard drive that contains CP. Several viruses were detected and the suspect had Limewire installed.

I am looking to gather information on the possibility the CP files had been remotely installed on the suspects computer without his knowledge.

wetheridge

[Cyber_Da_Inv]

A little more information is needed. What training have you had and what forensic tools are you using? Are you law enforcement?

[wetheridge]

I am former Law Enforcement, and have been through Access Data as well as other agencies. I am currently using FTK 2.2.

[Cyber_Da_Inv]

A little hesitant to offer assistance. Put my mind at ease and advise if you have a court order to be in possession of this CP media. Being former LE doesn't qualify, at least on my side of the continent.

[PreferredUser]

As a former LE I am sure you are aware of:
18 USC § 2252
Possession, distribution and receipt of child pornography (mandatory min 5 yrs for distribution or receipt; max 20 years)

18 USC § 2252A
Possession, distribution and receipt of child pornography (mandatory min 5 yrs for distribution or receipt; max 20 years)

That said what information on the computer makes you suspect the images were placed on the computer remotely?

[wetheridge]

There is nothing so far that leads me to believe that these images were downloaded to the suspects computer remotely. That being said, this argument is going to be made.

There are only 7 images and there does not appear to be any type of search to acquire the images.

[wetheridge]

[Cyber_Da_Inv]

I can only say that I would be hesitant to make a SODDI defense argument without some offer of proof. That would go a long way to harm your reputation as a forensic examiner.