Digital Forensics and Examination

The book I read to research this post was The Handbook of Digital Forensics & Examination by Eoghan Casey et al which is an excellent book which I bought from kindle. This book covers everything to do with digital forensics from computers to mobile phones. There's even a chapter on computerized air conditioning & heating. In the UK a high profile case that featured digital forensics was the case of Ian Huntley who murdered 2 young girls. He dumped the bodies miles away from his house to make it look like they hadn't been murdered in his house which they had. One of the girls had used her phone in his house which they were able to confirm thanks to her service provider. Also Huntley claimed his girlfriend Maxine Carr had been in the house with him giving him an alibi & they were able to prove she had been several miles away thanks to her mobile phone service provider. Both of them were convicted. The police often use a service provided by Oracle to trace the location of mobile phone users. If you need to make an image of a hard drive the 2 most used programs are encase & FTK imager. Mairex is often used to locate emails on a computer. Often files are copied into SQL Server or Lotus Notes to assemble them although sometimes an excel spreadsheet or windows viewer are used. It depends on the file type. A serial killer nicknamed BTK or bind, torture & kill was found because he sent taunting emails & the location they were sent from was traced to a church. This was a good example of the fact that just because emails are sent from a location doesn't mean the owner of that computer has sent them. Although BTK had access. In another case a paedophile claimed he had downloaded dirty photos of children from the internet but by examining the properties of the photos they were able to prove he had taken them with a camera.