Mark Sievers Trial Day 5 - Michael Lacombe - Digital Forensice Specialist

TL;DR

Witness discusses digital forensic examinations and findings regarding a Garmin GPS unit in a legal case.

Transcript

State Attorney's are present both defense counsel and mr. Seavers yesterday six today three tomorrow somehow there was a bit my math was off a total of 19 okay I just wanted to alert the court because I had said 20 okay state ready yes defense is ready please be seated I'll ask our jurors again that you follow my instructions not talk about the cas... Read More

Key Insights

• ❓ Digital forensic specialists undergo rigorous training and certification for examining electronic devices.
• 🔨 Specific software tools like Cellebrite and Encase are used for forensic examinations on different types of devices.
• ❓ Deleted data can still be recoverable in forensic examinations, unlike overwritten data.
• ❓ Collaboration between forensic specialists ensures accuracy and thoroughness in examination processes.
• ✊ Powering off and on a GPS unit can impact trip data and route calculations.
• 💌 Examination of data from Garmin USA records revealed an email address associated with a Garmin GPS unit.
• 🥼 Collaborative testing on a Garmin unit outside the lab provided valuable insights into data handling.

Questions & Answers

Q: What are the main duties of a digital forensic specialist?

A digital forensic specialist examines electronic devices like cell phones, computers, and GPS units to extract data for investigations. They undergo specialized training and certification for this role.

Q: How do deleted and overwritten data differ in forensic examinations?

In forensic examinations, deleted data means the pointer is removed but the data can still be recovered, while overwritten data is replaced with new information, making it harder to retrieve the original data.

Q: How does turning off and on a Garmin GPS unit affect trip data?

When a Garmin GPS unit is powered off and on, trip data may be marked for deletion but could still be accessible to specialists for examination, though the route could change based on the current location.

Q: What role does collaboration play in forensic examinations?

Collaboration between forensic specialists like the witness and his colleague involved working on a timeline spreadsheet that contained data from the Garmin GPS unit, ensuring accuracy in the examination process.

Summary & Key Takeaways

• Witness from Lee County Sheriff's Office discusses digital forensic examination duties and certifications.

• Witness details the use of specific software for forensic examinations of electronic devices.

• Witness testifies about findings from a Garmin GPS unit in a homicide investigation case.