More for our podcast
It is interesting that SiQuest/Cacheback/John Bradley is directly involved with the Casey Anthony case…
I see your point and it seems like many scenarios can play out. My comment was merely just to add that step into an acquisition team's checklist.
I see. )
Like
- verify that at the time of examination camera date time is set corrrectly.
Data without an actual consequence (if not that of showing - rightly - thoroughfulness in the examination), as
In case the date is anything but the "default first boot" one, the date migth have been set/reset before the device was acquired, n times, without leaving a trace.
In case the date is the "default first boot one", there is no way to know if it was correct "before" nor if the reset has been caused by removing batteries or by simply not recharging them for some time (accident vs. tampering).
If I get it right the only evidence one can find is that a picture is in the filesystem with date/time later )or higher pic # in the filename) than another picture that is in a "later position" in the filesystem, which can raise some perplexities.
But even then, you cannot really-really say if the date/time change was done "on purpose" or "by accident" or by manipulating the memory card outside the camera.
jaclaz
1530 EDT - Casey Anthony trial live - DF prosecution expert on cross right now http//
Sorry, I am not getting it. ?
Say I have a camera.
I take batteries out/completely dicharge them/do a full reset.
Date will default to January, 1, 1999 or something like that.
I wipe the memory card.
Today, June 8th, 2011, at 0600 PM I set the date to June 7th, 2011, time 0605 PM and take two shots.
Then, I set the date to June 8th, 2011 (correct date), time 0615 PM (correct time) and take another two shots.What can be said - even after having examined the camera - about the accuracy/correctness of date and time settings?
jaclaz
This is why absolute statements are generally a bad idea.
1530 EDT - Casey Anthony trial live - DF prosecution expert on cross right now http//
thesent.nl/ken404 EnCase being discussed with FireFox history
anyone have a link to the archived feed of this?
Link to archives
http//
Osborne's testimony on the 23rd
http//
Link to archives
http//
www.realitychatter.com/t3239-casey-anthony-trial-video-archive
Cheers