The e mail i found below demonstrates how mr barzini

Info icon This preview shows pages 9–16. Sign up to view the full content.

View Full Document Right Arrow Icon
The e-mail I found below demonstrates how Mr. Barzini had ways of making their friends to cooperate. From the friendship point of view, that language used in the email sounds like a threat.
Image of page 9

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
This e-mail should be of investigator’s interest. It sounds like they are chatting in codes such as “make sure you see Vinnie and make sure you get the funds to your herd master” There’s another email I examined using Money as Keyword in the Search function. The email came from Joey Lawless that discussed bringing seed money for their flock operations
Image of page 10
Image of page 11

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
6. Find a deleted file of interest to this investigation from the image drive by exploring the image in Autopsy and explain why you think the file is of interest in the investigation. The image below demonstrates that email found was deleted. The Autopsy String Report
Image of page 12
In the screenshot below, from the deleted e-mail, indicates something was sent to or from Vivid Sound Productions from or to a Bill Wolford. Mr. Lawless could have deleted this e-mail as I believe it contained a sound clip which could have been the evidence that involved a recorded conversation about previous or future transactions or arrangements. I also found this email when I examined Barzini, it contains Speech Recognition information:
Image of page 13

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
7. What type of file system was the forensic image evidence collected from? Explain how you concluded on the type of file system. The file system type that was selected for this forensic image was New Technology File System (NTFS) as stated on part #19 of the lab instructions as well as under the file system details page. Margaret Rouse of TechTarget claims that NTFS is the file system that the Windows NT operating system uses for storing and retrieving files on a hard disk (Rouse, 2008). 8. Why should investigators take notes and annotate time/dates? What is this useful for? There are three methods for documenting a crime scene; written notes, crime scene photographs/videos, and diagrams or sketches (University of Texas, 2013, p.17-35). It is significant for investigators taking notes and annotating time and dates so if any evidence is found during investigation, examiners will look back and evaluate their notes for exactitude when presenting the evidence before the court. It is also imperative for examiners to document aspects of who and how an individual
Image of page 14
revealed an item, how and who enveloped the item, as well as the temperament of the item. Due to the fact that the court cases take a while after the crime scene is examined, having detailed notes and documents of everything is the only way to provide and maintain accuracy and ingenuous information about all of the observations. For instance if an examiner took note of the Hash value to ensure the integrity of the data acquired, if the hash value doesn’t match up, the examiner would conclude that the image file was altered.
Image of page 15

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 16
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern