Home | About Us | Services | Links | Contact

Investigations
Identity Theft Task Force
--Protecting yourself from ID Theft
Internet Crimes Against Children
Computer Forensics
Training
Prosecutor Training Grant
Law Enforcement Only
Community Outreach
 

Computer Forensics

The computer forensic unit of the Task Force has succeeded in training several new examiners during the past year. 

The search for, and recovery of, digital evidence from computers has become an increasing challenge during the past year.  This is mainly due to the continual increase in the size of individual hard drives and the number of computers being seized in each case.  This translates to an increase in the volume of evidence needing collections, storage, analysis, and processing.

The Task Force has acquired additional tools to increase the efficiency of the forensic unit.  Two Logicubes and ten FastBloc devices were purchased.  The Logicubes enable rapid on-site data acquisition.  This is a benefit in cases where it may be impractical or unauthorized for investigators to seize computers for later analysis, which typically takes an extended period of time.  The FastBlocs also allow rapid data acquisition, with an additional advantage of "previewing" capabilities.  An examiner may quickly view a hard drive for specific evidence, without doing a complete lengthy analysis.

An additional element the forensic examiners are having to address is other forms of digital evidence storage.  These include personal digital assistants (PDAs) and other hand-held devices that allow wireless communication, as well as "smart media" such as the Thumbdrive-style USB hard drive devices.  In the field of telecommunications fraud, access cards are regularly being modified to illegally obtain satellite service.

Just as technology continues to advance at a very fast pace, the forensic examiners must take steps to meet the ever-increasing challenges presented to them.  Staffing, equipment, and training have enabled us to meet some of those challenges during the year.

An analysis of computers was performed on equipment belonging to a college graduate student from China attending the University of California, Davis, who was involved in stem cell research.  The student was suspected of trade secret theft and was thought to have provided confidential information to contacts in China.  A PowerPoint presentation was found on the suspect's computer, which appeared to be a sales presentation of the confidential research results.

An analysis of a computer was performed on a laptop owned by a subject who was suspected of attacking two women on separate occasions, injecting each with an unidentified substance.  One victim was assaulted on a beach; the other victim at a ski resort.  The search did reveal that the suspect had accessed web sites which detail the molecular composition of various drugs, including information about specific "rave" type drugs specifically sought by the lead investigator.

Hi-Tech Forensics
07/01/06- 12/31/06

Home | About Us | Services | Links | Contact