Information Technology Reference
In-Depth Information
may. have. left. it. running. and. went. to. lunch,. or. that. person.
might.not.have.speciic.and.controlled.log-in.credentials.for.
everyone,.so.anyone.in.the.family.or.the.ofice.can.log.onto.
anyone.else's.computer.
Given.that.those.metadata.may.be.dificult.to.prove.or.at.
least. easy. to. refute,. what. other. methods. can. be. applied. to.
prove.who.did.what.and.when?.One.method.often.employed.
is.the.one.we.mentioned.in.our.example..Experts.will.create.
a.timeline.of.events.on.a.computer.that.establishes.what.was.
taking.place.when..For.instance,.they.can.show.that.at.8:37.
A.M.. on. Thursday,. December. 2,. the. computer. was. logged.
into.by.someone.with.the.user.name.of.Vjohnson..At.8:42.
A.M..an.Internet.browser.was.started.up.and.the.Facebook.
account.for.Violet.Johnson.was.logged.into..A.session.of.the.
game.Farmville.was.played.for.the.next.hour.or.so.under.the.
user.ID.of.VJ..At.9:56.A.M..a.Google.search.occurred.that.
looked.up.information.on.how.to.poison.your.husband..Then.
at.10:23.A.M..another.search.was.typed.in.with.the.search.
term. strychnine ..Finally,.at.10:54.A.M.,.a.Google.mail.ses-
sion. was. opened. up. under. the. user. name. JohnsV1@gmail.
com.and.that.session.shows.evidence.of.lasting.for.approxi-
mately.an.hour..Traces.of.e-mails.to.and.from.that.address.are.
found.with.date.and.time.stamps.that.correspond.to.that.time.
frame,.and.all.of.the.ones.from.that.e-mail.address.have.ample.
evidence.of.having.been.authored.by.the.same.Johnson.
Now.while.the.above.does.not.establish.perfect.evidence.
that.Johnson.was.planning.to.kill.her.husband.with.strych-
nine.poison,.if.he.should.show.up.with.that.condition.in.the.
future,.this.could.certainly.be.important.electronic.evidence.
of. her. culpability.. Even. without. using. metadata. that. might.
be. dificult. to. prove,. the. forensic. experts. can. show,. using.
this.methodology,.what.in.this.case.would.be.pretty.compel-
ling.evidence.of.who.was.actually.on.the.computer.when.the.
actions.that.establish.culpability.for.a.crime.took.place.
The.other.part.of.proving.integrity.is.somehow.establish-
ing. that. a. piece. of. electronic. evidence. was. not. tampered.
with.in.any.way..Because.it.is.electronic,.this.type.of.data.is.
Search WWH ::




Custom Search