danielhartley.files.wordpress.com  · Web viewthis is a close up of the photo of the CD case with the piece of paper inside. Below is the CD case opened it does not contain a CD.

Post on 02-Aug-2020

0 Views

Category:

Documents

0 Downloads

Preview:

Click to see full reader

Transcript

Investigation at the scene

Collecting Evidence

I arrived on scene at 11:00 on 9th December 2011, I arrived in room JAG18 at Example university. I was told by the person in charge, Dr. Q. Zhou, that the room had been secured since the suspected activity took place and nobody has been inside the room.

Initial photos of the scene were taken located in the room was a monitor, a tower, a mouse, a keyboard, a CD case, and a USB stick plugged into the tower.

A second picture of the initial entry to the crime scene

Below is a photograph of the tower with the USB memory stick plugged in and the CD case with a piece of paper inside.

this is a close up of the photo of the CD case with the piece of paper inside.

Below is the CD case opened it does not contain a CD.

Upon unfolding the piece of paper I discovered that the paper is an article called “Exploring Steganography: Seeing the Unseen” about hiding digital images.

I then proceeded to bag and tag the CD case and the Article I put them in an anti-static bag. I tagged the CD case as 1and the article as 2.I then continued further with my investigation.

I took the USB memory stick out of the computer and put it in an anti-static bag and tagged it as 3

I then took photos of the mouse it is an IBM mouse.

I then took photographs of the serial numbers on the back of the keyboard.

I then proceeded to take apart the back of the tower to inspect the hard drive however there was no hard drive and I took photographs of all the serial numbers I could find on the inside of the tower.

I then put the CPU back together and powered up the computer. I then attempted to eject the floppy disk but nothing was in there. I then ejected the CD drive and found a CD in there.

I removed the disk from the drive and put it into an anti-static bag and tagged it as 4.

top related