Computer Forensics Case Study
This is a report on the presentation of computer forensic evidence in a UK trial.
There are three things that concern me here:
- The computer was operated by a police officer prior to forensic examination.
- The forensic examiner gave an opinion on what files construed “radical Islamic politics.”
- The presence of documents”in the “Windows Options” folders was construed as evidence that that someone wanted to hide those documents
In general, computer forensics is rather ad hoc. Traditional rules of evidence are broken all the time. But this seems like a pretty egregious example.
james • August 31, 2007 6:40 AM
“The presence of documents”in the “Windows Options” folders was construed as evidence that that someone wanted to hide those documents”
Not a very good place to hide them!