Arsenal Reveals Sophisticated Evidence Tampering Involving Turkish Journalists

Arsenal Consulting President Mark Spencer’s article in Digital Forensics Magazine (Issue 27, published May 1) describes how his firm uncovered evidence tampering which led to the wrongful imprisonment of Turkish investigative reporter Baris Pehlivan and his colleagues at Odatv. Odatv runs one of the most popular news websites in Turkey and has a reputation for being critical of the current government, controlled since 2002 by the Justice and Development Party. Mr. Pehlivan and his colleagues are currently on trial and accused of supporting the Ergenekon terrorist organization. Ergenekon is an alleged secularist “deep state” in Turkey with ties to the military, academia, NGOs, and the media whose supporters are charged with plotting to overthrow the government.“Arsenal has a great deal of experience identifying evidence tampering, but even we were surprised by the volume and nature of the attacks against Mr. Pehlivan’s Odatv computer,” Mr. Spencer said. “Unfortunately for Mr. Pehlivan and his colleagues, these attacks were ultimately successful and resulted in their imprisonment.”

Arsenal used an analysis technique known as “Anchors in Relative Time” to reveal critical details about the attacks – details other digital forensics experts missed. This analysis technique allows digital forensics experts to determine when, in relative time, important events have occurred within electronic evidence, even when all the dates and times associated with those events cannot be trusted. Anchors in Relative Time has become one of Arsenal’s most powerful weapons when confronting sophisticated evidence tampering.

Mr. Spencer will be discussing the analysis of Mr. Pehlivan’s Odatv computer at the Internet Security Operations and Intelligence conference in San Francisco, CA on May 12 and the High Technology Crime Investigation Association’s Mid-Atlantic Chapter meeting in Manassas, VA on May 19.

About Arsenal Consulting
Arsenal provides digital forensics services to law firms, corporations, and government agencies by leveraging battle‐tested digital forensics tools and techniques refined through many years of research and development. Using the most powerful tools and techniques, Arsenal uncovers smoking guns that others simply cannot. Arsenal is headquartered in the Chelsea Naval Magazine, a historic military structure in which arms for the celebrated heavy frigate USS Constitution were stored, just outside Boston, Massachusetts.

Contact:
Mark Spencer
[email protected]


Get The Latest DFIR News!

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Leave a Comment

Latest Videos

Magnet Forensics' Matt Suiche on the Rise of e-Crime and Info Stealers

Forensic Focus 12th January 2023 3:00 am

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast. 

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading -  https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast.

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading - https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_BhrBg5_sAKo

Si and Desi Holiday Special 2022

Forensic Focus 16th December 2022 12:00 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...