TRIAL DAY 24 FOCUSED ON THE FORENSIC ANALYSIS OF COMPUTER EVIDENCE AGAINST CASEY ANTHONY HERE'S A DETAILED LOOK AT THE DAY OF TESTIMONY:
JUDGE SAID THAT UNLESS BAEZ IS QUESTIONING THE RELIABILITY OF THE DOG HANDLER'S THERE IS NO NEED TO MOTION TO OBJECT THE TESTIMONY OF SAID HANDLER'S
NEXT TO THE STAND IS KRISTIN BREWER
SUPERVISOR WITH COLLATERAL DAMAGE K-9 UNIT WITH OSCEOLA COUNTY SHERIFF'S OFFICE FOR 16 YEARS WORKS WITH K-9 BONES; BONES CAME OCSO NOT OSCEOLA SAID THAT IT WAS A HOBBY OF HER'S TO TRAIN DOGS THAT'S WHY SHE TOOK UP THIS JOB
SIDEBAR
PROTECTION, OBEDIENCE, ARTICLE TRACKING IS HOW SHE TRAINED BONES SAID THAT WHEN BONES CAME TO OSCEOLA SHE WAS ASSIGNED TO HIM AND LOVED HIM SAID THAT IT'S UP TO HER TO KEEP UP WITH BONES' TRAINING FROM 2005-PRESENT
SHOWN BONES' CERTIFICATION EXHIBIT AND RECOGNIZES THE PAPERWORK AND CERTIFICATES (MUCH MORE THICKER STACK OF PAPERS THAN GERUS FOR THE RECORD) HER TRAINING WITH BONES UPON ARRIVAL:
TRAINED FOR SEVERAL HOURS A WEEK
BASIC CADAVER COURSE
COMPLETED 11/13/05
MADE SURE THAT HE COULD FIND, IDENTIFY AND FINAL ALERT ON RESIDUAL ODOR -- WOODS, HIGH GRASS, CLAY, DIRT, PAVEMENT, GRASS, GRAVEL
KNEW WHERE SOME OF THE TARGETS WERE NOT ALL OF THEM BONES' PERFORMANCE STATES THAT HE HAD NO FALSE ALERTS, NO MISSES AND FOUND ALL OF HIS TARGETS INTENDED TO BE FOUND TRAINED ON BLOOD, PLACENTA, HUMAN BONE, TEETH, SEMEN
HUMAN REMAINS IN WATER SEMINAR
COMPLETED 11/07/07
ALL TARGETS ARE AT IN OR NEAR WATER AND PUT DOG ON BOAT AND TAKE SAID DOG TO TARGET AND MAKE SURE THAT HE/SHE CAN FIND SAID TARGET SUBMERGED OR NON-SUBMERGED BONES' PERFORMANCE NO FALSE ALERTS, NO MISSES AND FOUND ALL INTENDED TARGETS IN BETWEEN SEMINARS AND COURSES SHE CONTINUES TO TRAIN BONES USES DISTRACTORS TO ENSURE THAT HE WON'T ALERT TO MATERIAL THAT HE'S NOT TO ALERT TO-- DIFFERENT TOYS, TREATS, FOOD AND ANIMAL REMAINS FOR DISTRACTORS HASN'T USED OTHER ANIMALS URINE OR FECES BUT HE'S EXPOSED TO THOSE FACTORS ON A REGULAR BASIS ANYWAY AND ANY SEARCH OR TRAINING SESSION THROUGH SCHOOL DOESN'T RECALL IF THEY'VE USED CHEESE OR DAIRY FOR FOOD PRODUCT DISTRACTION AND BONES HAS NEVER ALERTED TO A FOOD SOURCE
ADVANCED LAND SEARCH
03/19/09 COMPLETED
CONSISTED OF BURIED, HANGING AND SURFACED SOURCES AND TRAINED TO IDENTIFY DIFFERENT STAGES OF HUMAN DECOMPOSITION BONES' FINAL ALERT IS A SIT NNDDA CERTIFICATION WAS ALSO ON THIS DAY (NNDDA MEANS THAT THE DOG CAN IDENTIFY DRUGS AND NARCOTICS) BONES HAS BEEN CERTIFIED AND TRAINED IN RESIDUAL ODOR -- TOOK HUMAN BLOOD AND PLACED IT ON A TILE WIPED IT CLEAN AND BONES CAN IDENTIFY THE CORRECT TILE AND SHALLOW GRAVES AND CLANDESTINE GRAVES WHERE BODIES HAD BEEN REMOVED CAN STILL IDENTIFY THE ODOR OF DECOMPOSITION REWARDS FOR BONES ARE NOTHING MORE THAN TENNIS BALLS NO FOOD ONLY TENNIS BALLS BECAUSE THAT IS HIS FAVORITE ALSO KEEPS PERFORMANCE RECORDS OF BONES' REAL WORLD SEARCHES 08/23/05 BONES WAS CALLED OUT ON A SEARCH AND BONES DIDN'T ALERT ON THAT DAY AND THE AREA OF INTEREST WAS DUG ANYWAYS AND REMAINS OF A DEAD DOG WAS FOUND 05/06/05 BONES DIDN'T ALERT ON SAID AREA AREA WAS DUG ANYWAYS AND REMAINS OF DEAD ANIMAL FOUND 05/16/05 DIDN'T ALERT AREA DUG ANYWAYS DEAD DOG FOUND 09/05/06 BONES DIDN'T ALERT ON THAT DAY AREA SEARCHED ANYWAYS AND DEAD OPOSSUM WAS FOUND 06/06/09 BONES DIDN'T ALERT ON THAT DAY AREA SEARCHED SMALL ANIMAL REMAINS WERE FOUND SAID THAT BONES HAS NEVER FALSELY ALERTED ON ANY REAL WORLD SEARCH AND THERE HAVE BEEN SEVERAL TIMES THAT BONES HAS ALERTED AND HUMAN REMAINS WERE FOUND 03/31/07 BONES ALERTED AND LOCATED SEVERAL SMALL BONES FROM A HUMAN SKELETON 10/08/07 BONES ALERTED ON THE AREA WHERE A BODY HAD BEEN DUG UP 10/18/07 BONES ALERTED ON THE WALL WHERE THE ELDERLY WOMAN WAS FOUND DECEASED 11/30/07 BONES CALLED TO LANDFILL BONES SEARCHED FOR SEVERAL DAYS BONES ALERTED TO COMFORTOR THAT BABY HAD BEEN BORN ON AND LATER DISCARDED 03/26/08 BONES CALLED OUT ALERTED TO ADDITIONAL BONES FOUND IN THE AREA AFTER SKULL WAS FOUND 05/14/09 BONES CALLED TO WATER SEARCH BONES ALERTED TO SPECIFIC AREA OF BUOY AND DIVERS LATER FOUND A HUMAN BODY LOCATED UNDER BUOY 05/25/09 BONES ALERTED WITHIN A FEW FEET OF BURNED BODY 09/20/10 BONES CALLED TO HOLE IN ORANGE GROVE BONES ALERTED TO SAID AREA AND TWO BODIES WERE LATER RECOVERED
BONES HAS BEEN CALLED STATE AND NATIONWIDE AND MANY OF THE SEARCHES RESULT IN NO ALERT FROM BONES; BONES WILL GIVE OFF MANY FACTORS LIKE FLUFFY TAIL, PAWING AT DIRT, SNIFFING AIR TO GET BETTER PINPOINT LOCATION OF SEARCH OF SMELL PRIOR TO GIVING FINAL ALERT
SIDEBAR
WAS CALLED TO ASSIST IN INVESTIGATION REGARDING THE DISAPPEARANCE OF CAYLEE ANTHONY AT HOPESPRING DRIVE ON 07/17/08 WHEN SHE ARRIVED SHE MET WITH FORGEY AND SAID THAT AREA OF INTEREST WAS BACKYARD AND THAT WAS ALL FORGEY TOLD HER WALKED TO YARD WITH BONES ON LEAD THROUGH GATE PUT BONES' SEARCH COLLAR ON AND TOOK HIM OFF LEAD AND BONES STARTED SEARCHING THE YARD SPENT 3-4 MINUTES SEARCHING THE YARD GAVE FINAL ALERT ON ONE LOCATION IN BACKYARD -- SAME AS GERUS IN BETWEEN CAYLEE'S PLAYHOUSE AND PICNIC BENCH
RETURNED NEXT DAY SURFACED APPEARED TO HAVE BEEN DISTURBED BY FORENSICS AND CSIs RAN BONES THROUGH SAME PROCESS BUT THERE WERE NO ALERTS -- CLAIMS HAPPENED BECAUSE WHATEVER HE WAS ALERTING TO PREVIOUS COULD'VE BEEN REMOVED OR DISSIPATED
DOESN'T GIVE COMMANDS TO DOGS ON SPECIFIC SOURCES DOGS CAN ALERT TO ANYTHING DECOMPOSING OUTSIDE OF THE BODY WHETHER THE PERSON IS ALIVE OR DEAD DURING TRAINING TOLD NOT TO USE OLD CARS BECAUSE THEY DON'T KNOW THE HISTORY OF THE CAR TRAINED TO FIND THE STRONGEST SOURCE WHATEVER THAT MAY BE NEVER DEPLOYED DOG INSIDE THE HOUSE BECAUSE SHE WASN'T ASKED TO NOR WAS SHE ASKED TO DEPLOY DOG IN SCREENED IN PORCH DOESN'T KNOW IF ANY CADAVER SEARCHES TOOK PLACE IN THE HOME
NEXT TO STAND IS SANDRA OSBORNE
FORENSIC COMPUTER EXAMINER FOR OCSO FOR 21 YEARS JUDGE ACCEPTS HER AS AN EXPERT WITNESS ON FORENSIC COMPUTER ANALYSIS
RECIEVED SEVERAL PIECS OF EVIDENCE COLLECTED IN CONNECTION WITH THE INVESTIGATION OF THE DISAPPEARANCE OF CAYLEE ANTHONY BELONGING TO CASEY ANTHONY SHOWN ENVELOPE CONTAINING NOKIA CELL PHONE BELONGING TO CASEY AND RECOGNIZES IT THERE ARE FORENSIC APPLICATIONS THAT CAN BE UTILIZED TO OBTAIN DATA FROM CELL PHONES SHE CAN VIEW THROUGH THIS PROGRAM ANYTHING THAT TOOK PLACE ON THE PHONE AND THAT THE PHONE WILL OFFER WAS TOLD TO SEE IF THERE WAS ANY INFORMATION BELONGING TO ZENAIDA FERNANDEZ-GONZALEZ WAS ON THE PHONE WASN'T ABLE TO RETREIVE ALL INFORMATION FROM THE PHONE BECAUSE OF LIMITATIONS OF CELLBRITE (DATA FOR FORENSIC) PHONE DID CONTAIN Sm CARD THE Sm CARD CONTAINED SAME INFORMATION AS THE PHONE THERE WAS NO INFORMATION BELONGING TO ZENAIDA FERNANDEZ-GONZALEZ
SHE RECIEVED COMPUTERS AND LAPTOP SERIAL NUMBER OF LAPTOP COMPUTER-- CND6430RKH RECEIVED DESKTOP COMPUTER SERIAL NUMBER OF HP TOWER-- MXM4100HYL RECIEVED THEM 07/17/08 RECIEVED LAPTOP 07/16/08 RECIEVED A CAMERA POLAROID D730 NIKKON COOLPIX CAMERA USED NCASE FOR THE CAMERAS REVIEWED VIDEOS OF CAYLEE ANTHONY THE VIDEO DATES 06/15/08 VIDEO APPEARED TO HAVE BEEN TAKEN AT A NURSING FACILITY THE DATE AND TIME ON THE CAMERA WAS CORRECT
DOESN'T RECALL IF THE LAPTOP CAME TO HER OFF OR ON BUT IN A LAB SETTING SHE'LL SHUT THE MACHINE DOWN AND RETRIEVE DATA OFF OF IT THAT WAY THE HARD DRIVE ON THE DESKTOP HP COMPUTER IS 160 Gb ITEM WAS POWERED DOWN NOT ON AT THE TIME SHE RECIEVED IT DOESN'T KNOW WHEN NCASE STARTED BUT SHE'S BEEN USING IT SINCE 2006 HAS BEEN PROVED TO BE A RELIABLE FORENSIC TOOL (NCASE) CAN EXAMINE EVERY BIT OF THE HARD DRIVE TO ENSURE THAT THE DATA THAT EXISTED DIDN'T CHANGE OR BECOME OBSTRUCTED THE HARD DRIVE SHE OBTAINED IT BY REMOVING IT FROM THE HP COMPUTER SHE ATTACHED IT TO THE WRITEBLOCKER TO PREVENT THE HARD DRIVE FROM BEING USED UNTIL IT'S REMOVED FROM THE WRITEBLOCKER RETURNED DESKTOP COMPUTER BACK TO THE FAMILY
DOESN'T EVALUATE THE EVIDENCE RETRIEVED FROM A CELL PHONE BUT EVIDENCE OBTAINED FROM A COMPUTER SHE WILL ASSIST IN THE DECIPHERING OF WHAT IS KEY, CRUCIAL OR NIL IMPORTANCE
RECESS TILL 10:45AM
NCASE ALLOWS HER TO SEE EVERYTHING THAT THE USER SEES ON THE COMPUTER HARD DRIVE HP COMPUTER HAD TWO USERS OWNER/CASEY SHE WAS INSTRUCTED TO FIND ANY INFORMATION ON ZANNY AND DETERMINE IF THE COMPUTER WILL LEAD THEM IN THE RIGHT DIRECTION OF CAYLEE IN TEMPORARY INTERNET FILES SHE DID FIND REFERENCES TO ZANNY-- PEOPLE SEARCH, CLASSMATE REUNION, GOOGLE SEARCHES, MYSPACE ALL WERE REFERENCES TO ZANNY BUT ALL OF THEM TOOK PLACE 07/16/08
ONE USER WAS PASSWORD PROTECTED RICO23 WAS THE PASSWORD; PASSWORD WAS SET EARLIER IN THE YEAR OF 2008 AROUND MARCH COPIED ALL OF THE INTERNET HISTORY AND TEMPORARY INTERNET FILES AND COOKIES ONTO A FORENSIC APP CALLED NETANALYSIS AND WAS ABLE TO VIEW THEM (4 & 1/2 YEARS WORTH) ANYTHING DONE ON THE COMPUTER IS USER SENSITIVE IT WILL STORE WHAT USER ACCOUNT IS ACTIVE AT THE TIME
WAS TOLD TO SEE IF ANY SEARCHES TOOK PLACE ON THE COMPUTER FOR THE WORD CHLOROFORM BOTH SPELLED CORRECTLY AND INCORRECTLY AND CAME UP WITH RESULTS THROUGH NETANALYSIS ON BOTH SPELLINGS FILES WERE KEPT IN UNALLOCATED SPACE WAS ABLE TO RECOVER A COMPLETE INTERNET HISTORY ON THE WORD CHLOROFORM
RECEIVED A COMPUTER BELONGING TO RICARDO MORALES ON OCTOBER 28TH, 2008 WAS ASKED TO DO KEYWORD SEARCHES AND GRAPHIC FILES SEARCH OF PICTURES OF CAYLEE WEARING A PINK SHIRT; WAS SHOWN TO THE COURT A PICTURE OF CAYLEE WITH A BLACK EYE (CASEY SHOW'S NO EMOTION HAS HEAD DOWN NOT EVEN LOOKING AT MONITOR) ONCE THE PHOTO IS ADDED TO GRAPHIC FILES THERE IS A WAY TO DETERMINE EXACTLY WHEN THE PHOTO IS TAKEN BY A PROGRAM THAT UPLOADS THE PHOTOS FROM THE CAMERA TO THE COMPUTER ITSELF
PROSECUTION CLAIMS THAT IN THE PHOTOGRAPH OF THE BLACK EYE CAYLEE ANTHONY WAS WEARING A PINK SHIRT THEY SAY THAT WHEN CAYLEE ANTHONY WAS FOUND DEAD SHE WAS IN A PINK SHIRT -- SHOWS NOT MUCH TIME PASSED FROM THE PHOTOGRAPH TAKEN TO TIME TODDLER WAS MURDERED
RECESS FOR 5 MINUTES
SHE WAS ABLE TO LOCATE THE PHOTO THAT WAS AMONG A COLLECTION OF PHOTOS OF CAYLEE IN A PINK SHIRT FROM A PHONE DRIVE CALLED THE GLOBE WAS TAKEN ON A CANNON POWERSHOT SD70 THE PHOTO WAS ALSO ON RICARDO MORALES' COMPUTER IS ABLE TO DETERMINE BASED ON EMBEDDED DATA WHEN THE PHOTO WAS TAKEN 01/28/08
SIDEBAR
THE 2ND PHOTO WAS TAKEN BY A CANNON POWERSHOT SD70 PHOTO WAS TAKEN 03/19/08 THERE WERE TWO USER PROFILES ON THE COMPUTER BUT DOESN'T MEAN THAT ONLY TWO PEOPLE USED THE COMPUTER AND THERE ARE VARIOUS TYPES OF INTERNET SEARCHES ON BOTH PROFILES THERE COULD BE MULTIPLE PEOPLE USING ONE PROFILE IF THE COMPUTER HIBERNATES PASSWORD MIGHT HAVE TO BE RE-ENTERED BUT SHE DIDN'T ASCERTAIN THAT ON THIS PARTICULAR COMPUTER (HP) BUT SHE TESTIFIED THAT SHE FOUND A KEYWORD SEARCH FOR THE WORD CHLOROFORM AROUND 08/20/08 THE EXACT TIME AND DATE WOULD BE INCORPORATED IN THE DATABASE THAT ONLY HER SUPERVISOR REVIEWS
NEVER SAW THE CANNON POWERSHOT CAMERA SO SHE DOESN'T KNOW IF THE TIME OF THE PHOTOS AND THE DATE ALSO ARE EVEN CORRECT NOT EVERY COMPUTER OR CAMERA SHE INSPECTS HAS THE CORRECT DATE, MONTH, TIME AND YEAR RAN SEARCHES ON RICARDO MORALES' COMPUTER FOR CHLOROFORM SHE INDICATED THAT THERE WERE NO PHOTOGRAPHS OF CHLOROFORM OR WEB PAGES ON HIS COMPUTER
SHOWS PHOTO OF COUPLE AT DINNER TABLE WITH SAYING "WIN HER OVER WITH CHLOROFORM" WASN'T AWARE THAT THIS WAS POSTED ON RICARDO MORALES' MYSPACE ACCOUNT -- INDICATES TO HER THAT THE GUY IN THE PHOTO IS TRYING TO REACH HIS ARM AROUND THE WOMAN IN THE PHOTO WITH A WHITE CLOTH IN HIS HAND TOWARD HER FACE
SAID THAT SINCE THIS PHOTO WASN'T ON HIS COMPUTER HE COULD'VE HAD IT THERE BEFORE SHE OBTAINED THE COMPUTER OR HE COULD'VE UPLOADED IT TO HIS ACCOUNT ON ANOTHER COMPUTER BUT BASED ON THE UNALLOCATED SPACE ON HIS COMPUTER SHE DIDN'T FIND IT
IF YOU ARE DOING A KEYWORD SEARCH THE PIXELS (WORDS INSERTED IN PHOTOS) EMBEDDED IN THE PHOTO WOULDN'T BE ADMITTED OR IDENTIFIED BY THE KEYWORD SEARCH NONE OF THE INTERNET SEARCHES, INTERNET HISTORY OR UNALLOCATED SPACE TURNED UP SEARCH HITS FOR THE WORD CHLOROFORM IN RICARDO MORALES' COMPUTER
LUNCH TILL 1:30PM
NEXT TO THE STAND IS KEVIN STINGER
SERGEANT WITH COMPUTER CRIMES WITH OCSO FOR 25 YEARS WORKED WITH COMPUTER CRIMES SINCE 2002 EXAMINES PEOPLE'S COMPUTERS FOR EVIDENTIARY PURPOSES FORENSIC COMPUTER ANALYST TESTIFIED IN BOTH STATE AND NATIONWIDE TRIALS FOR FORENSIC COMPUTER ANALYSIS AS AN EXPERT
SUPERVISOR OF MRS. OSBORNE AT TIME OF CAYLEE'S DISAPPEARANCE AS PEER REVIEW IN CASE MRS. OSBORNE OVERLOOKED SOMETHING THAT SHE DIDN'T NOTICE WAS MADE AWARE OF THE KEY WORD SEARCH FOR CHLOROFORM ON THE HP DESKTOP COMPUTER HE THEN MADE SURE THAT HE PRESERVED THE SEARCH HIT FOR THE WORD CHLOROFORM
UNALLOCATED SPACE IS LIKE A LIBRARY BACK WHEN THEY HAD CARD CATALOG WHERE YOU WOULD LOOK UP YOUR BOOK THEN YOU WOULD GO AND FIND THE BOOK ON THE SHELF-- THE COMPUTER HAS TO LOOK UP THE NAME OF SOMETHING BEFORE IT CAN GO AND SEARCH FOR IT WHEREVER IT MAY BE ON THE HARD DRIVE
FIREFOX WAS THE INTERNET BROWSER USED TO SEARCH FOR CHLOROFORM ON THE HP DESKTOP COMPUTER NORMALLY IT DOESN'T DELETE SEARCH HISTORY AUTOMATICALLY USUALLY THE INTERNET HISTORY HAS TO BE DELETED MANUALLY EVEN WHEN YOU DELETE SOMETHING FROM YOUR COMPUTER IT IS STILL THERE UNTIL THE PLACE THAT THE DELETED FILE IS STORED IS USED FOR ANOTHER PURPOSE
HE IDENTIFIED WHERE THE FILE STARTED AND ENDED AND THEN HE WAS ABLE TO EXTRACT THE CONTEXT AND RESTORE IT BY PLACING IT IN A FILE -- ONE THAT HE CREATES-- THEN HE CAN OPEN THE FILE AND REVIEW IT'S CONTENTS AND INTERPERET THE DATA THROUGH FORENSIC APPS
WAS ABLE TO USE AN APP CALLED CACHEBACK THAT TELLS HIM WHEN THE SEARCH OF INTERNET HISTORY TOOK PLACE, HOW LONG IT WAS VIEWED AND WHEN IT ENDED TOOK PLACE 03/31/08 - 04/02/08 FROM 03/24/08 - 03/27/08 THE INTERNET HISTORY FOUND NOTHING BUT SEARCH HITS FOR CHLOROFORM SHOWN REPORT FROM 03/17 AND RECOGNIZES IT FROM CACHEBACK SHOWN REPORT FROM 03/21 AND RECOGNIZES IT FROM CACHEBACK
SEARCHES FOR CHLOROFORM WERE NOT FOUND ON ANY OTHER COMPUTER JUST THE HP DESKTOP COMPUTER DOESN'T KNOW WHEN THE FILE WAS DELETED OR WHY IT WAS DELETED OR WHO DELETED IT DELETING THE INTERNET HISTORY AND COOKIES HELPS CLEAN OUT THE COMPUTER AND MAKE IT FASTER IN SPEED-- SEARCHES TOOK PLACE BEFORE CAYLEE WENT MISSING AND THE SEARCHES WERE FOR THE WORD CHLOROFORM AND HOW TO MAKE CHLOROFORM
WAS NOT ABLE TO RETRIEVE THE PAGE FROM UNALLOCATED SPACE AND RECONSTRUCT THE PAGE SOMEONE DID A SPECIFIC SEARCH ON THE COMPUTER FOR THE WORD CHLOROFORM AND THEN AFTER 10 SECS. WENT TO MYSPACE SHOWN PICTURE OF COUPLE WITH SAYING "WIN HER OVER WITH CHLOROFORM" WASN'T AWARE THAT IT WAS ON RICARDO MORALES' MYSPACE
COULDN'T RECONSTRUCT THE PAGE BECAUSE WHERE YOU GO ON THE COMPUTER IS STORED ONE PLACE AND WHAT YOU SEE ON A WEBPAGE IS STORED SOMEWHERE ELSE AND WHEN YOU DELETE THE FILES OF WHAT YOU SEE BY CLEANING OUT THE CACHE THERE IS NO WAY TO RECONSTRUCT WHAT HAS BEEN VIEWED
THE SPECIFIC SEARCH FOR CHLOROFORM CAME FROM GOOGLE BUT HE CANNOT SAY WHAT WAS EXACTLY ON THE PAGE BEING VIEWED
NEXT TO THE WITNESS STAND IS JOHN BRADLEY
SELF EMPLOYED CYQUEST (SOFTWARE THAT HE HAS CREATED FORMER POLICE OFFICER FROM CANADA) HAS TESTIFIED IN CANADA AS AN EXPERT WITNESS IN COMPUTER FORENSICS AND WITH HIS COMPANY HE HAS TESTIFIED IN TORONTO AS AN EXPERT WITNESS IN COMPUTER FORENSICS
JUDGE ENTERS HIM AS AN EXPERT WITNESS IN FORENSIC COMPUTER ANALYSIS
OWNER AND CREATOR OF THE SOFTWARE CACHEBACK -- CACHE IS A SERIES OF FOLDERS TO MAKE IT FASTER AND EASIER TO USE THE INTERNET THAT HOLD COPIED FILES OF WEBPAGES AND INTERNET BROWSING HISTORY AND KEYWORD SEARCHES
THE SOFTWARE ALLOTS FOR DIFFERENT TIME ZONES AND RANGES TEACHES OTHERS HOW TO USE HIS SOFTWARE CORRECTLY SO THAT WAY THEY HAVE THE BROADEST SCOPE NECESSARY TO OBTAIN INFORMATION FROM THE HARD DRIVE AND CACHES OF INTERNET BROWSERS FROM COMPUTERS USED FOR EVIDENTIARY PURPOSES HE IS A GUEST SPEAKER AT CONFERENCES ABOUT COMPUTER FORENSICS
TAUGHT MEMBERS OF OCSO HIS ADVANCED COURSE FOR CACHEBACK MET STINGER AND STINGER ASKED HIM TO LOOK AT A FILE FROM A THUMBDRIVE THE INFORMATION FROM THE FILE WAS CONTIGUOUS INFORMATION -- THE BLOCK OF DATA WAS FROM FIREFOX 2 WITHIN THE BODY OF THE DATA HE RECOVERED ONLY ONE WORD OF IMPORTANCE "CHLOROFORM"
COPIED THE WORK FROM THE THUMBDRIVE ONTO THE FORENSIC HARD DRIVE THAT HE HAD THERE AT THE CONFERENCE AND WORKED FROM THERE AFTER HE GAVE THE THUMBDRIVE BACK TO STINGER TOOK HIS TIME AND WENT LOOKING THROUGH THE WHOLE FILE AND FOUND THE IMPORTANT KEYWORD "CHLOROFORM" THE FILE WAS 3.2 Mb A BYT BEING ONLY ONE CHARACTER
HIS BELIEF AT THAT TIME DUE TO THE SIZE OF THE FILE THERE HAD TO BE AN AMOUNT OF INACTIVITY TO KEEP THE FILE FROM BEING OVERWRITTEN BECAUSE IT WAS FOUND IN UNALLOCATED SPACE WAS IMPRESSED TO FIND THAT THE FILE WAS STILL RECOVERABLE HE CANNOT SAY WHEN THE ORIGINAL FILE WAS DELETED THE BROWSER WILL NOT DELETE ALL THE BROWSING HISTORY ONCE IT'S THRESHOLD IS MET
HE CONCLUDED THAT IT WAS DELETED MANUALLY HIS NEXT STEP WAS TO RUN IT THROUGH A NUMBER OF TESTS TO FIND OUT WHY IT COULDN'T BE RECODED SO OVER THE NEXT 3 DAYS HE LOOKED AT THE INFORMATION TO SEE IF THERE WOULD BE ANY WAY TO DECODE IT AND WAS SUCCESSFULLY ABLE TO DECODE THE INFORMATION THROUGH THE SOFTWARE HE WAS ABLE TO FIX ALL THE ANAMOLIES AND RUN IT THROUGH REPEATED EXTENSIVE TESTS TO CORRECT IT
SHOWN REPORTS OF CACHEBACK REPORTS OF INFORMATION FOUND AND RECOGNIZES THEM FROM 03/17/08 THE CACHEBACK REPORT SHOWS HOW MANY TIMES A URL WAS VISITED 92 TIMES FROM THE SCOPE OF DATA THAT HE EXTRACTED WHEN SEARCHED ON GOOGLE THE WORD CHLOROFORM WAS MISSPELLED AS C-H-L-O-R-A-F-O-R-M
THERE WERE COMPUTER SEARCHES FOR CHLOROFORM ON GOOGLE AND WIKIPEDIA FOUND SEARCHES ON THE COMPUTER THROUGH GOOGLE AND WIKIPEDIA FOR: CHLOROFORM, ALCOHOL, INHALATION, PEROXIDE, SELF DEFENSE, SHOVEL, DEATH, HAND TO HAND COMBAT, HEAD INJURIES, MIDDLE MENINGEAL ARTERY, RUPTURED SPLEEN, CHEST TRAUMA, INTERNAL BLEEDING, HYPOVOLEMIA
RECESS FOR 15 MINUTES
HAD A BOOKMARK ON THE COMPUTER FOR CHEMISTRY CHLOROFORM HAD A GOOGLE SEARCH ON THE COMPUTER FOR "HOW TO MAKE CHLOROFORM" HAD A GOOGLE SEARCH FOR "HOW TO MAKE WEAPONS OUT OF HOUSEHOLD PRODUCTS" GOOGLE SEARCH FOR "NECK BREAKING"
WAS NOT ASKED TO DO ANY OTHER INSPECTIONS OF DATA OR MATERIAL FOR THIS PARTICULAR INVESTIGATION ORIGINALLY APPROACHED BY STINGER BECAUSE HE WAS USING BRADLEY'S SOFTWARE AND HE COULDN'T GET IT TO WORK CORRECTLY SO HE WAS HERE ON A CONFERENCE AND HE STAYED UP ALL NIGHT TO FIX THE PROBLEM PUT SOMETHING TOGETHER FOR HIM WHICH TOOK HIM A FEW NIGHTS COMPLETED THE DECODING FOR HIM WAS ASKED TO TESTIFY IN THIS CASE AND HE MIGHT GET PAID FOR THIS CASE AND HIS TESTIMONY BUT THE MONETARY SIGNIFICANCE DOESN'T APPEAL TO HIM
USES THIS CASE FOR PROMOTION OF HIS PRODUCT ON HIS WEBSITE BAEZ WANTS TO KNOW HOW LONG A PERSON WAS LOOKING AT A WEBSITE ON 03/17/08 VISITED A PAGE FOR 7 SECONDS BAEZ WANTS TO KNOW HOW LONG A PERSON WAS LOOKING AT ANOTHER WEBSITE (BOTH WEBSITES DEALT WITH CHLOROFORM) AND HE SAID ONE SECOND WEBPAGES FOR FACEBOOK AND MYSPACE WERE BROUGHT UP AND OPENED A LOT IN THE BROWSING HISTORY OF THE HP DESKTOP COMPUTER
MORE TIME WAS SPENT ON THE 11 AFFOREMENTIONED GOOGLE AND WIKIPEDIA SEARCHES THAN WAS SPENT ON CHLOROFORM SEARCHES THE LONGEST SOMEONE SPENT LOOKING AT CHLOROFORM WAS 2 MINUTES 25 SECONDS THE MAJORITY OF THEM RELATED TO CHLOROFORM WERE ONLY VIEWED FOR A MINUTE THERE ARE ONLY LIMITED THINGS HE CAN TELL FROM THE CACHEBACK REPORT CANNOT TESTIFY AS TO HOW LONG SOMEONE SPENT ON THE COMPUTER ON EACH PAGE OR THE ENTIRE MONTH OF MARCH STARTED DECODING THE INFORMATION FOR STINGER IN DECEMBER OF 2009
INDICATED THAT A LOT OF WEBSITES ARE DYNAMIC NOT STATIC THEY CHANGE PERIODICALLY AND DRAMATICALLY OVER TIME CANNOT TESTIFY ABOUT WHETHER OR NOT THINGS WERE PRINTED OVER THE INTERNET FOR LATER REVIEW CANNOT TELL BASED OFF OF THE INTERNET HISTORY WHAT WAS ON A WEBPAGE 18 MONTHS EARLIER HE WASN'T GIVEN ANY TIME PARAMETERS HE WAS JUST ASKED TO DECODE THE ENTIRE SEARCH HISTORY WEBSITE DEALING WITH HOW TO MAKE CHLOROFORM WAS VISITED APPROXIMATELY 84 TIMES (DO THE MATH IF SHE VISITED THE SITE AND ONLY LOOKED AT THE PAGE FOR ONE MINUTE AS PREVIOUSLY HEARD AND SHE VISITED THE SITE 84 TIMES-- 84 x 1 = 84 MINUTES)
WAS SHOWN A COPY OF A REPORT SUBMITTED BY SOMEONE ELSE FOR CYSEBOT.COM THE WEBSITE WAS VISITED PROSECUTION OBJECTS AND JUDGE SUSTAINS BAEZ STILL CONTINUES TO QUESTION WITNESS ABOUT REPORT FROM SOMEONE ELSE
JUDGE CALLS IMMEDIATE SIDEBAR
COURT IS RECESSED UNTIL 9AM
PROSECUTION STARTED OFF BY BRINGING IN THE TESTIMONY OF A SECOND DOG HANDLER WHO IS FAR MORE CREDIBLE AND RELIABLE THAN THE PREVIOUS TESTIMONY OF THE HANDLER OF GERUS THIS DOG DEFINITELY KNEW HIS STUFF AND MADE FAR LESS MISTAKES THAN GERUS DID NEXT THEY STARTED FOCUSING ON THE COMPUTER FORENSICS THE EVIDENCE JUST KIND OF FLOWED IN AND DROWNED CASEY LIKE A RIVER OVER EXPANDING THE BANKS WHAT DOESN'T SURPRISE ME IN THIS CASE IS THAT THE PROSECUTION DELIVERED MORE OF WHAT THEY PROMISED IN OPENING ARGUMENT AND THAT CASEY SHOWN NO EMOTION NOR INTEREST IN THE CASE BEING PRESENTED AGAINST HER SHOWING AND PROVING MORE HER GUILT AND PRE-MEDITATION THIS HAS DEFINITELY BEEN ONE TRIAL OF NOTHING BUT EVIDENCE STACKED AGAINST HER IT MAKES YOU ANXIOUS TO FIND OUT WHAT DEFENSE HAS GOT TO SHOW AND PROVE TO DISCREDIT THE PROSECUTION'S CASE AND AT THIS POINT I CAN HONESTLY TELL YOU IT'S GOING TO BE HARD TO SUCCEED AT THIS.
DON'T BE AFRAID TO LEAVE ME YOUR OPINIONS AND COMMENTS
No comments:
Post a Comment