digital forensics / expert witness
-
I had a lawyer that is a client of mine ask me about being an expert witness. He has a client that says he sent a message on facebook and then deleted it. He thought he could use the "Download a copy" of your Facebook data feature, but I don't think that's going to work because on this page, it says:
https://www.facebook.com/help/405183566203254
Messages Messages you’ve sent and received on Facebook. Note, if you've deleted a message it won't be included in your download as it has been deleted from your account.In addition to that, I don't have any experience in criminal justice and things like "chain of custody." Can someone recommend a company that has experience in this area? This would be in the Auburn, NY area.
-
I'm not a forensic expert in digital forensics, anyway all starts with a proper chain of custody and an unaltered probing env, which usually means you have to perform low level dumps of stuff you intend to manage, in order to avoid to leave your traces over the previous traces (in classic HDD you want to ddrescue everything... if you can go offline).
so NO, you cannot use any account feature to demonstrate anything, unless you want your activity to be discarded (at best)
-
If the client needs to get information from facebook they'll need to subpoena facebook to retain the information.
A forensic attorney would be where to start, but I'd imagine that time is of the essence as this information likely gets dumped quickly.
-
I know some of the folks over at IMS ExpertServices. They may be able to assist you with this.
-
I found a pro that I have worked with years ago that specializes in this kind of thing. For anyone that is interested:
http://optimalteck.com -
@Mike-Davis said in digital forensics / expert witness:
I found a pro that I have worked with years ago that specializes in this kind of thing. For anyone that is interested:
http://optimalteck.comHe's a Lenovo salesman? And an expert witness for legal issues? Um......
-
@scottalanmiller Must be legacy stuff on the website. When I last worked with the owner, he was mostly doing HIPAA audit and security stuff. With that said, I don't know all the members of his team.
The same would be true of NTG. The addition or removal of one team member could make a big change in the services NTG could offer.
-
@Mike-Davis said in digital forensics / expert witness:
@scottalanmiller Must be legacy stuff on the website. When I last worked with the owner, he was mostly doing HIPAA audit and security stuff. With that said, I don't know all the members of his team.
The same would be true of NTG. The addition or removal of one team member could make a big change in the services NTG could offer.
The point is that selling Lenovo is a questionable ethical stance.
-
@scottalanmiller said in digital forensics / expert witness:
@Mike-Davis said in digital forensics / expert witness:
@scottalanmiller Must be legacy stuff on the website. When I last worked with the owner, he was mostly doing HIPAA audit and security stuff. With that said, I don't know all the members of his team.
The same would be true of NTG. The addition or removal of one team member could make a big change in the services NTG could offer.
The point is that selling Lenovo is a questionable ethical stance.
To you, possibly others. Not everyone.
-
@JaredBusch said in digital forensics / expert witness:
@scottalanmiller said in digital forensics / expert witness:
@Mike-Davis said in digital forensics / expert witness:
@scottalanmiller Must be legacy stuff on the website. When I last worked with the owner, he was mostly doing HIPAA audit and security stuff. With that said, I don't know all the members of his team.
The same would be true of NTG. The addition or removal of one team member could make a big change in the services NTG could offer.
The point is that selling Lenovo is a questionable ethical stance.
To you, possibly others. Not everyone.
You can say that about any ethical violation.
