60 likes | 402 Views
11Digital Evidence as Alibi. Dr. John P. Abraham Professor UTPA. Alibi. Key pieces are: time and location
E N D
11Digital Evidence as Alibi Dr. John P. Abraham Professor UTPA
Alibi • Key pieces are: time and location • Jerry Durado was found guilty of killing his parents despite his claim that he was at work 300 miles away. A forensic analysis showed that only thing that happened in his computer at work was a virus scan. • Telephone logs, credit card records, internet activities, etc. • Computer times and IP address are used as Alibi. Keep in mind these can be manipulated creating a false alibi.
Investigating an alibi • Establish reliability of digital evidence • DHCP records will show assigned IP addresses. • Can IP address be changed by the user? • Can the time be changed by the user? • A suspect claimed he was at home, doing nothing other than sending an email to his friend. The friend shared the email, and the header revealed that was not sent from the suspects home. The date and time did not match, and the email was forged. His own computer showed evidence of attempts at forging to learn how to do it.