Scribd Logo
Upload

Welcome to Scribd!

  • 75 views

    Group 4 Lipa City Colleges Westmead International School

    Uploaded by

    tricia ona
    The document discusses the procedures for preserving digital evidence, including securing computer systems and data storage mediums and making copies of secured data. It also details the forensic investigation process of a case involving images of naked children, including classifying the images as evidence and determining what type of cybercrime was committed.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd

    Group 4 Lipa City Colleges Westmead International School

    Uploaded by

    tricia ona
    75 views13 pages
    The document discusses the procedures for preserving digital evidence, including securing computer systems and data storage mediums and making copies of secured data. It also details the forensic investigation process of a case involving images of naked children, including classifying the images as evidence and determining what type of cybercrime was committed.

    Original Title

    lcc, westmead

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses the procedures for preserving digital evidence, including securing computer systems and data storage mediums and making copies of secured data. It also details the forensic investigation process of a case involving images of naked children, including classifying the images as evidence and determining what type of cybercrime was committed.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Download as pptx, pdf, or txt
    75 views13 pages

    Group 4 Lipa City Colleges Westmead International School

    Uploaded by

    tricia ona
    The document discusses the procedures for preserving digital evidence, including securing computer systems and data storage mediums and making copies of secured data. It also details the forensic investigation process of a case involving images of naked children, including classifying the images as evidence and determining what type of cybercrime was committed.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Download as pptx, pdf, or txt
    of 13

    Group 4

    Lipa City Colleges


    Westmead International
    School
    DIGITAL EVIDENCE: How to
    preserve its probative value?

    As a forensic investigator, the


    preservation of digital evidence’
    probative value must be pursuant
    to the preservation order provided
    by Section 13, Chapter 4 of RA
    10175. It can only be done once
    the search and seizure warrant
    was properly issued and procured.
    Once granted, the security and
    preservation of the following must
    be given an utmost priority: (1)
    secure the computer system or
    computer data storage medium (2)
    make and retain a copy of those
    computer data secured (3) maintain
    the integrity of the relevant stored
    computer data (4) conduct forensic
    analysis or examination of such
    After that, the forensic
    investigator shall consider
    all the measures to protect
    and preserve the computer
    data.
    •
    DELETED •
    farting baby.jpg
    naked to the butt. Jpg
    FILES/ • running naked.xlsx
    • sitting beauty1.jpg
    RETRIEVED • sitting beauty2.jpg

    FILES •
    •
    sleeping naked1.mp4
    sleeping naked2. jpg
    • baby awesome.pdf
    • sleeping naked2.jpg
    • baby behind 1.jpg
    • sweet baby.jpg
    • baby behind 2.docx
    TOTAL: 21
    • baby relaxing . pptx
    • baby_naked2.apk
    NO. OF EVIDENCE: 22 because Vicky
    • baby_naked3.jpg and Harry file which is already
    • baby_naked4.jpg saved in the flash drive can be
    considered as lascivious conduct
    • baby_naked5.jpg portrayed by children
    • bath time baby.jpg KIND OF EVIDENCE: NAKED
    • bath time baby1.jpg PICTURES OF CHILDREN
    classified as documentary evidence
    • bath time baby2.jpg
    since photographs belong to such
    • CAUGHT NAKED.jpg kind or type of evidence
    • crying babe.jpg
    FORENSIC PROCEDURE

    Using the FTK Imager, click the create disk then


    choose logical drive. Click next. After that, choose the
    drive and select drive E since flashdrive is where the
    files to recovered and retrieved were saved. Click add
    then EO1 then next. Fill in the evidence item
    information box. Afterwards, choose the destination
    folder and provide the image file name, click finish.
    Once done, click add evidence and select the image
    file by tracing its source path which is desktop. The
    files which can’t be read and classified as yoya were
    converted into image file (jpeg/jfif) by changing the file
    extension name.
    Created By AccessData® FTK® [Physical Drive Information]
    Imager 3.1.1.8 Removable drive: True
    Source data size: 7556 MB
    Case Information: Sector count: 15474816
    Acquired using: ADI3.1.1.8 [Computed Hashes]
    Case Number: 80808080 MD5 checksum:
    Evidence Number: 08 fab29b91ba73b5c29b8c53f3f9852ce
    Unique description: group 4 1
    Examiner: LCC/Westmead SHA1 checksum:
    Notes: pornography 4412efc2b8c8d2ed7932e3505dfa78
    72898df923
    ------------------------------------------------------------
    -- Image Information:
    Acquisition started: Fri Oct 26
    Information for 09:09:13 2018
    C:\Users\KAYEZELYN\Desktop\Cyber Acquisition finished: Fri Oct 26
    crimeG4: 09:15:01 2018
    Segment list:
    Physical Evidentiary Item (Source)
    Information: C:\Users\KAYEZELYN\Desktop\Cyber
    [Device Info] crimeG4.E01
    Source Type: Logical
    [Drive Geometry] Image Verification Results:
    Bytes per Sector: 512 Verification started: Fri Oct 26
    Sector Count: 15,474,816 09:15:01 2018
    Verification finished: Fri Oct 26
    AUTHENTICITY

    Using the Exiftool, drop the image


    retrieved on the application so that it
    will reveal the metadata or the data
    about data or information regarding it
    to include whether it undergone
    photoshop or any kind of alteration,
    editing or similar acts
    TYPE OF CYBERCRIME COMMITTED

    Pursuant to Section 4 Republic Act 10175


    otherwise known as Cybercrime
    Prevention Act of 2012, the type of crime
    committed falls under the third category,
    Content- related offenses which to be
    specific is paragraph 2, Child Pornography
    or those punishable and prohibited acts
    defined and punishable by RA 9775
    Elements
    1. That there is a representation, whether
    visual, audio or written combination thereof
    by electronical, mechanical, digital, optical,
    magnetic or any other means

    2. That child is engaged or involved in real or


    simulated explicit sexual activities

    SEXUAL ACTIVITIES: Naked children that are


    sexually touching one another or portraying
    lascivious conducts

    You might also like