230 likes | 340 Views
OFFICE OF THE ATTORNEY GENERAL Cyber Crime Center. Special Investigator Keith Leavitt office 601-359-4113 fax 601-359-4254 e-mail bleav@ago.state.ms.us. Search and Seizure Electronic Evidence. Investigation and Pre-Search Controlling the Situation What to Look For? What Not to Do?
E N D
OFFICE OF THE ATTORNEY GENERALCyber Crime Center Special Investigator Keith Leavitt office 601-359-4113 fax 601-359-4254 e-mail bleav@ago.state.ms.us
Search and Seizure Electronic Evidence • Investigation and Pre-Search • Controlling the Situation • What to Look For? • What Not to Do? • What to Do? • Final Check
Investigation and Pre-Search • Verify information received from subpoenas. • Check the location • Find out who is home and when they are home • Get phone numbers of residents in case you need to contact them during the search
Investigation and Pre-Search • Who is in charge? • Assignments • Back-up • Neighbors • Press • Wear clothing you can crawl around on the floor with. • Bio-hazard safeguards
Controlling the Situation • Once entry is gained, move everyone to a central location away from computers • Locate weapons • Find Internet connections, photograph and disable • Locate suspect and isolate for interview
Controlling the Situation • Person(s) responsible for security • Person(s) responsible for interview • Person(s) responsible for search • Person(s) responsible for documentation and search warrant materials
What to Look For? • Computer Systems (of course) • Cell Phones PDA’s • Removable Media • Documentation of Internet Access • Other Documentation • Forfeiture Concerns
Computer Systems • Desktops • Laptops • Towers • Servers • Xbox 360 • Other Gaming Consoles (Removable Media)
Cellular Devices • Blackberry • Smart Phones • Cellular Phones • Hybrids • Make sure you get ALL CABLES and CRADLES • We have had cases where the suspect only checked his email on his Blackberry. The computer did not contain any evidence, but the Blackberry did!! • Follow Seizure Protocols (Another class)
STORAGE DEVICES HARD DRIVES NANO HARD DISK DRIVES
What Not To Do? • Boot computers and look around. • View unprotected devices on scene. • Allow cell phones and PDA’s to power down or go to sleep mode. • Allow cell phones and PDA’s to send or receive signals. • Fail to disconnect Internet connections to residence.
What to Do? • Photograph everything good. • Make sure you get everything. Remember to search the suspect and search vehicles and out buildings. • Label all media separately and complete the return.
Final Check • Make sure you did not miss anything. Some media is very small and easily concealed. • Collect any equipment you brought to the scene • Leave a receipt or copy of the return • Get names of all officers on the scene • Get names of all residents.
Special Investigator Keith Leavitt office 601-359-4113 fax 601-359-4254 e-mail bleav@ago.state.ms.us