How would you solve this case?

Networking/Security Forums -> Computer Forensics and Incident Response

Author: justiceseeker PostPosted: Sat Nov 20, 2010 3:12 am    Post subject: How would you solve this case?
    ----
This is a police investigation into a felony committed against a minor. The suspect accessed the minors facebook account and posted defamatory and harrassing messages, acting as the minor. The suspect setup a gmail account and assigned it to the facebook account. Subpoena's have been issued for activity logs from facebook and google. There are 26 pages of IP addresses during the date in question. A subpoena was issued to ATT also, because the suspect accessed the facebook account with there I phone. ATT says the IP addresses assigned to the I phone are deleted daily.

It appears the suspect used a proxy server.

What kind of information should the police be looking for on the activity logs. Can the logs record a unique identifier on the I phone?

Would a subpoena to the proxy service yield any results?
Any feedback would be appreciated.


A

Author: SifuMikeLocation: Vancouver (not BC) WA (not DC) PostPosted: Sat Nov 20, 2010 4:49 am    Post subject:
    ----
Sounds like we're being asked to do someone's homework here.

Author: srohrbachLocation: San Diego PostPosted: Wed Jan 05, 2011 12:23 am    Post subject:
    ----
SifuMike wrote:
Sounds like we're being asked to do someone's homework here.


Agreed. As a practice, I do not give any advice on police lead investigations unless I have been properly hired/retained. The fact you have so much information on the case but do not disclose your interest or role is curious to me and may in fact damage the case for the police if you are not an employee of that department already. My suggestion is if you are with that department and do not have a budget to retain forensics specialists, just say that and ask if anyone in your area can help, even if it is pro bono. They might be more willing to help if you made sure the paper work is in order and all jurisdictional and liability issues have been completely addressed.



Networking/Security Forums -> Computer Forensics and Incident Response


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group