Tech Forensics, computers cel phones, texts,

[tlcya]

Were computers seized from Baker home in the sealed warrant search? Have LE received phone records, texts etc. yet?

How big a role will these things play in a trial?

How long do forensics of technological nature such as these take?

All things Computer, etc Forensics here.

[NoeticSoul]

Thanks for the nifty new thread

[tlcya]

So anyone know any tech people or LE detectives, etc who may know how long the computere, etc forensics would take to compile, analyse?

[tehcloser]

Seems like it took a little while in ICA's case, but I guess it would depend on how deep they had to dig?

[ynotdivein]

Do we know if/how many computers, laptops, and/or cell phones were taken into evidence? And when?

Gosh I am recognizing now how much Sunshine Laws are our friends.

[NoeticSoul]

I would also be VERY interested to find out where Zahra's laptop is/was.. as she was given one in AU. What may be on her laptop could be VERY important.

"The community and Giru State School raised money for a wheelchair for Zahra, and for a laptop computer so she could do schoolwork from home."

http://www2.morganton.com/news/2010/...s-a-ar-500679/

[tlcya]

Noetic, I completely agree. If Zahra still had her computer, or if someone else had confiscated it. Knowing what became of that computer is very important IMO

[Belinda]

I would have to suspect they took it away from her to use for themselves, especially since she was not allowed to contact family or friends.

[raisincharlie]

Originally Posted by tlcox

So anyone know any tech people or LE detectives, etc who may know how long the computere, etc forensics would take to compile, analyse?

I suspect the time involved is mostly dependent on the electronic forensic lab work load. Have followed three cases from around the Raleigh area in the past - SBI doing the analysis of computers - one case it was about 3 weeks, another it was about 6 months. But to qualify - that was the time it took before the press found results or when new warrants were released with probable cause sections including data from the computers.

A couple of other things I do know - they do not collect the entire computer - only the hard drive. As to cell records, no warrant is necessary, only a subpeona. From what I have seen, one won't know about it or possible results unless it is referenced in a probable cause section of a warrant. Seems to me though, warrants in Zahra's case will continue to be sealed even though EBs attorneys let the cats out of the bag so to speak. This is only what I have seen in other high profile cases in NC - there are always variations.

[NancyA]

Great thread. I suspect computer evidence will play a very large part in the case - searches for how to dismember a body anyone?

[SherlockHomey]

Originally Posted by tlcox

Were computers seized from Baker home in the sealed warrant search? Have LE received phone records, texts etc. yet?

How big a role will these things play in a trial?

How long do forensics of technological nature such as these take?

All things Computer, etc Forensics here.

Great thread and finally something right down my alley! The computer forensics will play a huge part in this case, I have no doubt whatsoever. I am sure their ISP, etc were court ordered to turn over online activity on their account.

Once forensics copies the hard drive it could take awhile to compile all the evidence found. The device will searched with a fine tooth comb compiling deleted files, online activity such as email, websites visited, google searches and documents written.

Since it seems these two were online freaks, I believe this evidence will be a turning point as to to timeline, COD and guilt to which party. Watch closely.

ETA moo

[Mountain_Kat]

Great thread topic, TL!

[Mountain_Kat]

I wonder if these two would have been smart enough to have gotten rid of computers during the clean up. But, even if they were that smart, I would think the money factor would come into play. In other words, I doubt they would have trashed them as opposed to selling them.

(Just thinking out loud.)

[Belinda]

I think they kept them. I can't see them being able to live without their computers, so I think they would have taken the risk to keep them. IMO

[Yellow Rose]

Great thread and many thanks for starting it! I am hopeful that the evaluation and/or forensics of the computer data will lead us to know more about the roles each of them played in the Zahra dynamic.

[Wise Old Owl]

I was looking up something else and came across this.

It helps to verify this thread as this topic was discussed in MSM

QUOTE:
Police have also combed through woods, fields and poured through the family's computers and phone records.

http://abcnews.go.com/US/search-zahr...1891811&page=2

[tlcya]

Originally Posted by Mountain_Kat

I wonder if these two would have been smart enough to have gotten rid of computers during the clean up. But, even if they were that smart, I would think the money factor would come into play. In other words, I doubt they would have trashed them as opposed to selling them.

(Just thinking out loud.)

I am with Belinda, tossing or otherwise gettign rid of computers would be like chopping off your own arm to one such as EB. I don't think she can imagine life without her computer and I doubt she had the forsight to realize she was going to be in jail and unable to access it. I think LE's got any computers that were used by EB and AB. Just my own.

[Lera213]

I have a feeling this will take much longer than normal because EB used a lot of different aliases so she could have signed up for the internet by any of the known names and even unknown.

This could be true too with cell phone but with cell phone they can go by phone number. If it was one of those Go Phone though, that might make it harder.

[SherlockHomey]

T'is true about many different aliases, however, this information is most likely to be in her computer.

Most anything you do online is never gone or just erased. It's out there somewhere sitting on a server......

[Mountain_Kat]

Originally Posted by Lera213

I have a feeling this will take much longer than normal because EB used a lot of different aliases so she could have signed up for the internet by any of the known names and even unknown.

This could be true too with cell phone but with cell phone they can go by phone number. If it was one of those Go Phone though, that might make it harder.

Pretty common for drug dealers to use throw away phones. And again, if we are to believe BB...well...

[NoeticSoul]

I was asking myself this morning about things they may have deleted from Windows via their trash and wondered if it was retrievable..

I was glad to learn this (because I didn't know) and thought I would share for others who don't:

"Users may think that when files are deleted and the trash can is emptied, that they are permanently erased, but this isn’t so. When files are erased on DOS, Windows, Windows 95, Windows 98 and Windows NT, the data from the file remains on the unallocated storage space.

That is, unless of course, DiskScrub, M-Sweep or other DoD certified file deletion software has been used. The data that is left behind is retrievable through system recovery and computer forensics software utilities.

The data that is retrieved is coded in computer language, which must be decoded either by the system recovery or data forensic specialist."

How Unallocated File Space Can Help Your Case

http://www.expertdataforensics.com/c...help-your-case

[Scamperoo]

Originally Posted by Lera213

I have a feeling this will take much longer than normal because EB used a lot of different aliases so she could have signed up for the internet by any of the known names and even unknown.

This could be true too with cell phone but with cell phone they can go by phone number. If it was one of those Go Phone though, that might make it harder.

This is true but it doesn't matter as she has an Internet service provider and an IP address which can be traced back to her/him. It's very hard to hide online unless you make an effort to reduce your "footprint" and impossible to wipe your hard drive unless you overwrite the whole drive.

[Lera213]

well maybe they trashed the hard drive? Nah,these two are too stupid to think of that.

[tsisqua]

Originally Posted by SherlockHomey

Great thread and finally something right down my alley! The computer forensics will play a huge part in this case, I have no doubt whatsoever. I am sure their ISP, etc were court ordered to turn over online activity on their account.

Once forensics copies the hard drive it could take awhile to compile all the evidence found. The device will searched with a fine tooth comb compiling deleted files, online activity such as email, websites visited, google searches and documents written.

Since it seems these two were online freaks, I believe this evidence will be a turning point as to to timeline, COD and guilt to which party. Watch closely.

ETA moo

It is down my alley as well. All the activity on the hard drive has time stamps, combing over that shouldn't take long even if they have to undelete. If they have to wait on an ISP or social network to turn over info would be where the wait comes in. That and discerning what data is actually evidence. Some web activity like searches may not seem to be evidence until other information comes to light.

I almost feel sorry for the person that had to wade through all the "this is my collector fairy picture" crap.

[tlcya]

tsis and sherlock, I hope ya'll hang around as this case progresses as we will surely be making use of your expertise