Audio File Creation Date is wrong

artshocx · 2012-09-24T20:38:08Z

i subpoenaed and received an audio file of a recorded hearing, however the creation date has changed. these folks should know better. i know they keep all active original audio files and must maintain them for a specified time period etc. and the subpoena specifies original, uncompressed, unaltered file, etc. has anyone run into this? i'm sure that it was simply ignorance, but i'm not sure what to tell them to do to keep that information in tact? in my experience, simply dragging the file onto a CD-RW wouldn't necessarily change a creation date, but i am not an expert on whether that might not be true of some burners, etc. it seems likely that they converted the original to mp3 and that's why the date changed. does anyone know? is there some standard that audio forensics follow to ensure chain of custody, at least as much as humanly possible? thanks.

Page 2 / 2 Prev

Legal Issues

Last Post by erowe 13 years ago

11 Posts

5 Users

0 Reactions

2,786 Views

RSS

erowe

(@erowe)

Estimable Member

Joined: 18 years ago

Posts: 144

27/09/2012 8:09 pm

Sending them a copy of FTK imager and walking them through it on the phone might work. FTK imager is pretty intuitive so with any luck they won't have problems following directions. That way you'll get the right time stamps as well as a hash. (Also next time they will know how to do it with any luck.)

ReplyQuote

Page 2 / 2 Prev

8 Forums
15.7 K Topics
92.3 K Posts
326 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed