NCJ Number
225070
Journal
Forensic Examiner Volume: 16 Issue: 4 Dated: Winter 2007 Pages: 12-17
Date Published
2007
Length
6 pages
Annotation
This article uses a case study to show how digital forensics experts can collect and analyze digital information from electronic devices such as computer hard drives and cell phones.
Abstract
The case study shows how digital forensic experts were able to identify the residence location of a computer being used to send anonymous e-mails to “John Smith” in the course of a 2-year Internet romance. Smith chatted on an instant messenger at work, e-mailed pictures and jokes, and even planned weekend getaways. When the anonymous girlfriend did not show up for a series of planned getaways, Smith hired a private investigator, who unsuccessfully attempted to get personal information on the woman through the service provider. The private investigator then recruited the services of a digital forensics company. They had the knowledge required to obtain location information from the “header” of the woman’s e-mails, such as addresses from each routing point the e-mail passes through on the Internet, showing the path taken to reach a destination. This led the investigator to a computer in the same city as Smith. Since the woman had never revealed where she lived, the investigators suspected she may be someone known to Smith and possibly be one of the contacts on his personal list of e-mail addresses. This proved to be the case. The woman’s e-mail address was that of a computer in Smith’s own home. He had been having an Internet affair with his own wife. Using this case study as an illustration, this article discusses the tracing of anonymous e-mails, the recovery of deleted computer files, recent changes to the rules of civil procedures regarding the production of electronic information, and licensing requirements for forensic examiners. 5 references