I once 'wiped' my 7TB raid with months of open cases on it.. that was fun! Took over a year to re-examine everything and get back on track. Yes, I cried.
I was imaging a drive and pointed to my raid on accident.
So far haven't wiped any phones… yet.
cotem - in what jurisdiction do you operate and are you in a law enforcement or private sector capacity?
Your approach does seem a bit heavy handed. But I thought the IP Box was not 'forensically sound'?
I'm wondering how people handle devices that they cannot access? Are these things kept under review periodically to check if technology has moved to enable it being unlocked or is the case usually moved on by then?
Law enforcement Canada.
I handle devices that i cannot access by checking later and if the case is done, well it's gone.
The IP-Box is not forensically sound but it's the only way, if you don't have the suspect's computer, to get into the phone. Just have to document everything that you do!
Sounds like things work quite differently where you are. Usually the officer in case will be in charge of the seized items and releasing them to forensics, etc. You seem to be saying that you hold on to them until the case is concluded in your department so you can check up in future on any inaccessible devices?
Also where you said you can use the suspect's computer to get into the phone, this only applies when the phone has not been turned off, which is rare isn't it?
My partner (16 year vet) accidentally performed a low level format on a SD card with all of the pictures and video from a homicide. It didn't go over well.