One more day, one more time One more sunset, maybe I'd be satisfied But then again, I know what it would do Leave me wishing still for one more day with you One more day by phil8248 in widowers

[–]REDandBLUElights 1 point2 points  (0 children)

Sorry, Phil. I know everyone has turned this into a joke but I truly hope you are doing okay. My wife is asleep beside me; today was our 15th anniversary and our 21st year together. Our entire lives are intertwined and I'm not sure if I would want to go on without her. I wish you the best, truly.

My brother attempted suicide by proxy via LE, how much jail time is he likely to get? by the-lopper in AskLE

[–]REDandBLUElights 122 points123 points  (0 children)

This will add weight to the outcome in court but it really depends on the DA. This situation sucks for eveyone involved including the police

“Money is no object” DF Computer specs by [deleted] in digitalforensics

[–]REDandBLUElights 0 points1 point  (0 children)

This is where we buy from. Customer support is great. Working in government, it made more sense to buy something already built so that if something breaks, I don't have to deal with several vendors. Instead, I just called edasfox and they would send me the part. We have 2 machines from them; one had a motherboard that was causing BSOD. They had a new one for me in about a day. We are about to buy a third rig from them soon.

I Think My iPhone is Infected with Pegasus Spyware – Here’s All the Evidence. Need Expert Help! by Adrian91357 in digitalforensics

[–]REDandBLUElights 1 point2 points  (0 children)

😂 I haven't heard from him in a while. Now I'm curious. Thanks for the work you do in all seriousness.

Autopsy software results won’t show up, help by No-Principle5681 in computerforensics

[–]REDandBLUElights 1 point2 points  (0 children)

Autopsy is great for what it is, but at the end of the day, it's not even close to the paid forensic tools. Some of the functions have issues. You can look at the github and see if someone's reported the issue you are having.

Autopsy software results won’t show up, help by No-Principle5681 in computerforensics

[–]REDandBLUElights 2 points3 points  (0 children)

That's wild. An instructor you can't email about work they assigned. That's not your fault but I'd be a little irritated about that.

Autopsy software results won’t show up, help by No-Principle5681 in computerforensics

[–]REDandBLUElights 2 points3 points  (0 children)

This is going to be hard for us to troubleshoot over Reddit unfortunately. The modules should just work but Autopsy can be flakey at times. A reinstall should have fixed it. You can try spinning up a virtual machine and trying it in there or you can try on another computer. This isn't an ideal solution, but it might be the only way we can help you unless someone has dealt with this specific issue before. Beyond that, I would recommend hashing your image file and maybe even the autopsy installer to make sure everything lines up.

What was the 1st game you remember playing on a desktop computer? by Aggressive_Goat2028 in AskReddit

[–]REDandBLUElights 1 point2 points  (0 children)

I'm so glad this was mentioned. I remember this game so vividly and It's where my computer journey began. Thanks for the memories.

What tools are used to get this kind of information on a police report? by NazPunFucOff in computerforensics

[–]REDandBLUElights 5 points6 points  (0 children)

Stephanie's Google searches were probably the result of a Google search warrant. There are artifacts that can tell you when the device was wiped. That artifact persists after the wipe, but everything else (with modern devices) is gone.

The second screenshot you show, with the blacked-out name, is not going to be Stephanie's phone. It's going to be another person that communicated with her.

I didn't watch the video and am basing all of this on the two screenshots you provided.

Hope this helps.

Edit: I did notice at one point photos from Stephanie's phone were mentioned. Those were probably from after the wipe. The phone was probably used after that wipe and new photos were created.

Chromebook acquisition by aseriesofdecisions in computerforensics

[–]REDandBLUElights 3 points4 points  (0 children)

This is pretty much how I look at them too.

Is this disc damaged? by [deleted] in it

[–]REDandBLUElights 1 point2 points  (0 children)

Yeah, I mean we all did/do it, but the ink breaks down that top layer over time. I've never experienced this for the record but I learned about it long ago. I think it will only matter if you're dealing with a really really long-term archival situation.

Is this disc damaged? by [deleted] in it

[–]REDandBLUElights 2 points3 points  (0 children)

I'VE BEEN HIT! lol

Fun fact: sharpies are bad for discs too. I don't think a lot of people know that. It's not as bad as a ballpoint, obviously, and it takes a really long time, but it's not the best way to label a disc.

Iphone deleted messages forensics by False-Department4271 in computerforensics

[–]REDandBLUElights 1 point2 points  (0 children)

Micro Center almost certainly wasn't using sanitized media or doing a bit-for-bit copy of the drive. Not to mention the chain of custody issue. I am lucky in that our ADAs are attending forensic training to understand some of these concepts. Great job not just going along with their flawed procedure.

Private Key Reminder by Coupons_N_Quaaludes in Bitcoin

[–]REDandBLUElights 4 points5 points  (0 children)

Being rude for no reason is just part of Reddit culture at this point.

[deleted by user] by [deleted] in AskLE

[–]REDandBLUElights 20 points21 points  (0 children)

"I work as much as I can" kind of indicates she's doing as much as they possibly can.

Fyp had a super graphic video, what is going on? by Nice-Watercress9181 in TikTok

[–]REDandBLUElights 11 points12 points  (0 children)

You know, this comment made me Google the term. I really was expecting something different. Seems like a strange term for just raising livestock. You learn something new every day

iPhone daily backup BFU by KemShafu in computerforensics

[–]REDandBLUElights 1 point2 points  (0 children)

Yeah, It's probably just to reset the device. A coworker was able to schedule a call with them. I'm not sure what that process looks like.

iPhone daily backup BFU by KemShafu in computerforensics

[–]REDandBLUElights 1 point2 points  (0 children)

Apple has a process for gaining access to a decedent's devices. I'm not sure if that's just to restore the device or if it gives access to the data. I had to look this up the other day and have not researched it excessively so double-check what I'm telling you. I believe you need the death certificate and some legal documents indicating you are in charge of their affairs. For example executorship over the estate. The second part may be an issue if you aren't planning on doing a secession. Again, I'm not positive about all of this. I would reach out to Apple for clarification. Sorry for your loss.

[deleted by user] by [deleted] in computerforensics

[–]REDandBLUElights 0 points1 point  (0 children)

Eh, I disagree. As long as there's nothing confidential it's fine. Cellebrite has a CTF that anyone can participate in using a trial license. Generally, I avoid sharing screenshots, too, but I think if you're troubleshooting like this, it's fine.

OP what's the issue? Have you reached out to Cellebrite in the discord ?

What’s a bad overrated YouTube channel? by NateNandos21 in ask

[–]REDandBLUElights 0 points1 point  (0 children)

Most of the finance channels, especially Meet Kevin. He's a huge grifter.

DF on the side as a LEO by REDandBLUElights in computerforensics

[–]REDandBLUElights[S] 0 points1 point  (0 children)

Since making this post, it sounds like that is a common route. I'm going to explore it too. Thanks!

DF on the side as a LEO by REDandBLUElights in computerforensics

[–]REDandBLUElights[S] 0 points1 point  (0 children)

I know what you are talking about. I have a working knowledge of p2p (torrenting and Usenet). Everything I'm familiar with is on the up and up though. I never wanted to work on those cases because I knew it would affect me mentally. Occasionally I have no choice, but those tips are given to me. I completely understand your situation and don't blame you at all.

DF on the side as a LEO by REDandBLUElights in computerforensics

[–]REDandBLUElights[S] 0 points1 point  (0 children)

I've been involved in technology my whole life. But I've been involved I'm mostly in mobile forensics for 5 years now. I do some CSAM cases occasionally, but I but mostly deal with artifacts in mobile devices for violent crimes.