I might be wrong, but I don't think he had an image. Just one single file. He said he had no knowledge of anything on the drive besides that one file.
So they just pulled a file off the computers? Multiple computers were seized.
I might be wrong, but I don't think he had an image. Just one single file. He said he had no knowledge of anything on the drive besides that one file.
Well, what I think he said was that he was asked to help out with the analysis of the Firefox 2 history, because they had a problem using his software, and they had trouble with other similar software on the market as well. He said he troubleshot the software for three days to get it to work properly - there was some problem with parsing Firefox 2 files (I didn't catch exactly what the problem was), but he said he was asked to help them get it to work. From what I caught, he was only given access to the Firefox 2 history from one drive.
http//
Bradley's testimony - he was given FF2 history that CB did not decode even though it stated that it could; He worked on it and was able to decode it and come up with a couple of hits.
Has anyone here taken the CB training?