Details recorded ab...
 
Notifications
Clear all

Details recorded about exhibits

5 Posts
4 Users
0 Likes
535 Views
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
Topic starter
 

So this thread is kind of a follow on from the BIOS/UEFI post.
I'm interested to know what others, preferably in a professional capacity (LE or Private), record about an exhibit as part of the imaging process.
So Make, Model and Serial of device to me seem like a fairly sensible start, but how far do people go?
Processor/Memory capacity?
Output ports (USB/HDMI etc)
BIOS make and revision?
To go alongside that, does everyone photograph the exhibit when its being imaged and what key things are photographed?

 
Posted : 01/05/2016 11:53 am
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

I take photographs of the device I am imaging to capture labels with serial numbers. If there is significant physical damage to a device, I will also photograph the damage to record the fact that it was provided to me damaged.

I also take a photograph of smartphones, with the smartphone laying on top of the Chain of Custody document for the phone (without covering up COC information I have recorded obviously).

 
Posted : 01/05/2016 10:14 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
Topic starter
 

So do you fill details into a form or do you take photos instead?

 
Posted : 02/05/2016 2:15 pm
(@pbeardmore)
Posts: 289
Reputable Member
 

I make a positive record of empty slots/sockets if that makes sense. Its very easy for the suspect to claim the was an SD card that was seized and it had crucial evidence or priceless baby photos etc. Also , the client may not be as careful during the seizure so you need to cover yourself. I have seen SD cards not recorded during the seizure on many occasions (I often wonder what the legal situation is with that data)

 
Posted : 12/05/2016 2:53 pm
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
 

Collectors often photograph the device in situ from all possible angles. I am never on collection site.

If it is a device that we take apart, we have multiple digital cameras that record the entire process.

I personally also talk, which gets recorded. This way I can go back to the video and ask what I was doing. "Pouring 30 cc-s of hydrofluoric acid into beaker… !!@# WHAT THE !@$#%#!" and such…

 
Posted : 13/05/2016 12:28 am
Share: