Jimmy Rodgers Trial Day 5 - Witness Michael Lacomb - Digital Forensic Specialist

TL;DR

Digital forensics specialist testifies about examining digital data from a Garmin GPS device in a legal case.

Transcript

okay we have both assistant state attorneys present all for defense counsel and mr. Rogers states ready defense ready who's your next witness and any issues with him before we bring him out you have to testify about it test him testify about it and how he compiled it and what's on it and then when the state moves tries to move it in we'll see where... Read More

Key Insights

• ❓ Digital forensics specialists undergo specialized training to examine digital devices for legal purposes.
• 👾 Unallocated space in digital devices contains deleted data accessible through forensic software like Encase.
• 🧑‍💻 Recovered data such as trip logs from devices like Garmin GPS can provide crucial evidence in investigations.
• 💁 Collaboration with device manufacturers like Garmin can supplement forensic findings with additional information.
• 👨‍🔬 Techniques like keyword searches and file analysis help forensic specialists uncover relevant data from digital devices.
• 👮 Creating timelines and reports based on recovered data can assist law enforcement in building cases.
• 🦮 Assumptions based on data analysis can help guide investigations but may not provide exact details.

Questions & Answers

Q: What training did the witness undergo to become a digital forensics specialist?

The witness completed a two-week course in digital forensics and a six-month certification process before becoming a specialist in the field.

Q: How did the witness recover location information from a Garmin GPS device?

By accessing deleted trip logs and data from the unallocated space within the Garmin image file using forensic software like Encase.

Q: How did the witness identify dates and times from within the Garmin device?

He used a deleted file called GTM data, which showed the last time the device connected to satellites, alongside recreated trip logs, to determine time frames.

Q: What was the significance of contacting Garmin USA during the investigation?

Garmin USA provided files and confirmed a connection to their servers, including an email address tied to the device, aiding in the investigation.

Summary & Key Takeaways

• Witness is a digital forensics specialist employed with the Lee County Sheriff's Office.

• He explains his duties as examining computers, cell phones, and other devices for digital data.

• The witness testifies about his training, equipment used, and the process of recovering data from digital devices.