Join Us!

Person threatens to...
 
Notifications
Clear all

Person threatens to sue for removing password  

  RSS
Monika
(@monika)
New Member

Thanks a lot issue solved.
Edited due to sensitive date

Quote
Posted : 19/11/2018 9:16 am
randomaccess
(@randomaccess)
Active Member

that's up to your laws
but im curious why you removed the password, or how you did it?

ReplyQuote
Posted : 19/11/2018 11:31 am
hectic_forensics
(@hectic_forensics)
Junior Member

One would expect that if evidence is found and used as part of a legal/criminal proceeding then some sort of destruction order on the device could be appended to the matter - certainly this could be the case in the UK.

To be honest though, you should ask one of the lawyers or legal advisors in your Government Organisation. They will be better placed to advise you on this matter.

ReplyQuote
Posted : 19/11/2018 11:36 am
Monika
(@monika)
New Member

Thanks a lot issue solved.
Edited due to sensitive date

ReplyQuote
Posted : 19/11/2018 2:22 pm
passcodeunlock
(@passcodeunlock)
Senior Member

Rule #1 NEVER work on the original SSD, work on a binary copy!

At this point your evidence is void, because it's data was modified after the date of the seizure! How can you prove now that whatever is found on the disk, it wasn't you who put it there ?!

ReplyQuote
Posted : 19/11/2018 2:31 pm
Monika
(@monika)
New Member

Thanks a lot issue solved.
Edited due to sensitive date

ReplyQuote
Posted : 19/11/2018 3:18 pm
Monika
(@monika)
New Member

Thanks a lot,
got advice from outside ,It seems its not an issue afterall. (since all this happened after the imaging process)

ReplyQuote
Posted : 19/11/2018 3:59 pm
passcodeunlock
(@passcodeunlock)
Senior Member

Are you sure ?! If you could been imaging the d**n thing at the first place and use the image for further analysis, it wouldn't make much sense to use a password removal tool, no ?!

I feel that you just try to use the idea to "escape" somehow from the situation you created, your explanation is "bleeding" )

ReplyQuote
Posted : 19/11/2018 4:59 pm
jaclaz
(@jaclaz)
Community Legend

Thanks a lot issue solved.
Edited due to sensitive date

Yeah, sure, November 19 is a very touchy date roll .

jaclaz

ReplyQuote
Posted : 19/11/2018 7:28 pm
Monika
(@monika)
New Member

ReplyQuote
Posted : 20/11/2018 1:53 am
passcodeunlock
(@passcodeunlock)
Senior Member

Whatever you say - so be it )

ReplyQuote
Posted : 20/11/2018 4:38 pm
Monika
(@monika)
New Member

Whatever you say - so be it )

I Heard this forum would be professional and helpful. Joined just to ask this,

ReplyQuote
Posted : 21/11/2018 3:58 am
azrael
(@azrael)
Senior Member

Monika, this forum _has_ been professional and helpful.

These are experienced examiners and industry professionals - don't mistake a casual typing style for a lack of skill or an attempt to assist when _your_ question has been less than clear in detail. Remember that they are helping you out in their own time when you possibly made a mess of something …

Now I, for one, am not adverse to the idea of cracking / removing the password in order to image - but the process would need to be well documented and understood, and your evidence handling would have to be beyond reproach otherwise the very realistic possibility of claims of modification post seizure would become an issue.

This certainly wouldn't be an issue in a UK court if it was done correctly, nor is there a risk of being sued by the defendant …

ReplyQuote
Posted : 21/11/2018 12:27 pm
Share: