All Details¶
Case Details¶
Contact Details¶
Case Assets¶
Case Collection¶
Evidence Details¶
Case Photographs¶
Case Disposal¶
Forensic Hardware and Software¶
0384¶
Report Produced : 12/04/2019 11:57:52¶
Produced By :¶
Forensic Hardware and Software¶
0384¶
Report Produced : 12/04/2019 11:57:52¶
Produced By :¶
Case Details¶
| Case Reference |
| IDMS Reference |
| Examiner |
| Case Service Level |
| Analysis Type |
| Case Classification Level |
| Service Level |
| Open Date/Time |
| Due Date/Time |
| Case Status |
| Contact Name |
| Assigned Staff Member Name |
| Record Status |
Case Background¶
Background Attachment(s)¶
| Technical Review |
| Technical Review |
| Appropriate examinations have been performed to address request |
| Report is clear and understandable |
| The procedures performed were adequately documented and forensically sound |
| Exam documentation was sufficiently detailed to enable reproduction of the results |
0384¶
2019-010614¶
| PRIORITY |
| Job Performance Failure |
| UNCLASSIFIED |
| 7 Days |
| 08/13/2019 08:10:46 (-0400) |
| 08/20/2019 23:59:59 (-0400) |
Unlocked¶
2 Desktop Computers submitted on¶
8/13/19;¶
2 additional desktop computers submitting on 8/21/19.¶
2019-010614 Request Form.pdf¶
Leonard Notes.docx¶
Yes¶
Yes¶
EFTA00128367¶
| The interpretations and conclusions of the examiner were reasonable |
| Report is consistent with the examination documentation |
| When generally accepted examination tools are not used, are significant findings verified by the examiner? |
| Results media has been spot checked |
| Examiner performing review |
| Date of review |
| Contact Details |
| Category | Description |
|---|---|
| First Name | |
| Last Name | |
| Sector | New York Field Office |
| Primary Email | |
| Authority Contact Name | |
| Authority Contact Number | 7034131860 |
| Authority Contact Email | |
| Authority Status | Approved |
| Case Assets | |
| Product Name Tableau TD2 | |
| Asset Tag | X29946 |
| Case Process | Evidence Imaging - Write Blocker (0002) |
| Tracked Asset Yes | |
| Asset Type | Hardware |
| Product Name Tableau TD2 | |
| Asset Tag | X29946 |
| Case Process | Evidence Imaging - Write Blocker (0004) |
| Tracked Asset Yes | |
| Asset Type | Hardware |
| Product Name Alienware | |
| Asset Tag | X29717 |
| Case Process | Unknown |
| Tracked Asset Yes | |
| Asset Type | Hardware |
| Product Name Aegis Fortress | |
| Asset Tag | 101300010379 |
| Case Process | Unknown |
| Tracked Asset Yes | |
| Asset Type | Hardware |
| Case Collection | |
| Collection Date/Time | 08/11/2019 11:28:00 (-0400 |
| Collection From | |
| Collection Type | Collection |
| Method | Staff Collection |
EFTA00128368¶
| Evidence Status | Complete |
|---|---|
| Assigned Staff Member Name | |
| Office | Cyber Investigations Office New York |
| Company | US Department of Justice Office of the Inspector General |
| CompanyAddress | 1401 S Clark St. Suite 900 Arlington VA 22202 United States |
| Company Contact Name | Cyber Investigations Washington |
| Company Contact Number | |
| Collected Exhibits | |
| Evidence Reference 0001 | |
| Evidence Type | Desktop |
| Seal Number | N/A |
| Description | HP EliteDesk 800 S/N: 2UA4381YNJ |
| Evidence Reference 0002 | |
| Evidence Type | Hard Drive |
| Seal Number | N/A |
| Description | Seagate 500 GB SATA HDD S/N: Z6E8M349 |
| Evidence Reference 0003 | |
| Evidence Type | Desktop |
| Seal Number | N/A |
| Description | HP EliteDesk 800 S/N: 2UA4381YMW |
| Evidence Reference 0004 | |
| Evidence Type | Hard Drive |
| Seal Number | N/A |
| Description | Seagate 500 GB SATA HDD S/N: Z6E8K1EV |
| Attachment(s) | ECD In.pdf |
| Collection Date/Time | 08/21/2019 00:00:00 (-0400) |
| Collection From | |
| Collection Type | Collection |
| Method | Staff Collection |
| Evidence Status | Complete |
| Assigned Staff Member Name | |
| Office | New York Field Office |
| Company | US Department of Justice Office of the Inspector General |
| CompanyAddress | 1 Battery Park Plaza 29th Floor New York New York 10004 United States |
EFTA00128369¶
| Company Contact Name | New York Field Office |
|---|---|
| Collected Exhibits | |
| Evidence Reference 0005 | |
| Evidence Type | Desktop |
| Seal Number | N/A |
| Description | HP EliteDesk 800 S/N: 2UA4381XJW |
| Evidence Reference 0006 | |
| Evidence Type | Hard Drive |
| Seal Number | N/A |
| Description | Seagate 500GB SATA HDD S/N: Z6E8KD3N |
| Evidence Reference 0007 | |
| Evidence Type | Desktop |
| Seal Number | N/A |
| Description | HP Compaq 8200 Elite |
| Evidence Reference 0008 | |
| Evidence Type | Hard Drive |
| Seal Number | N/A |
| Description | Hitachi 500GB SATA HDD S/N: JP1572JE36LSNK |
| Attachment(s) | ECD in.pdf |
| Evidence Details | |
| Evidence Reference | 0001 |
| Evidence Type | Desktop |
| Logged In Date/Time | 08/11/2019 04:15:35 (-0400) |
| Original Seal Number | N/A |
| Storage Location | Washington Vault |
| Priority | High |
| Description | HP EliteDesk 800 S/N: 2UA4381YNJ |
| Property Number | 0214 207268 |
| Seized Date/Time | 08/11/2019 11:00:34 (-0400) |
| Seized By/Produced By | |
| Processing Result | N/A |
| Archived | No |
| Pre-Imaging Details | |
| Start Date/Time | 08/14/2019 19:15:45 (-0400) |
| End Date/Time | 08/14/2019 19:25:00 (-0400) |
| Conducted By (Name) | |
| Manufacturer | Hewlett Packard |
| Model | EliteDesk 800 |
| Serial Number | 2UA381YNJ |
| Casing Type | Workstation |
| Casing Colour | Black |
| BIOS Key | F10 |
| BIOS Date/Time | 08/14/2019 19:21 |
EFTA00128370¶
| Actual Date/Time | 08/14/2019 19:21 |
|---|---|
| Password Protected | No |
| Attachment(s) | IMG_0075.JPG |
| Evidence Reference | 0002 |
| Evidence Type | Hard Drive |
| Logged In Date/Time | 08/11/2019 04:15:35 (-0400) |
| Original Seal Number | N/A |
| Storage Location | Washington Vault |
| Priority | High |
| Description | Seagate 500 GB SATA HDD S/N: Z6E8M349 |
| Property Number | N/A |
| Seized Date/Time | 08/11/2019 11:00:30 (-0400) |
| Seized By/Produced By | |
| Processing Result | N/A |
| Archived | No |
| Attachment(s) | Hash Match.jpg |
| Pre-Imaging Details | |
| Start Date/Time | 08/11/2019 16:00:00(-0400) |
| Conducted By (Name) | |
| Manufacturer | Seagate |
| Model | ST500DM002 |
| Serial Number | Z6E8M349 |
| Type | SATA HDD |
| Notes | Drive removed from desktop 0214 207268 for imaging by Lidsky on 8/11/19 at CC lab. |
| Attachment(s) | |
| Imaging Details | |
| Start Date/Time | 08/11/2019 16:40:28 (-0400) |
| End Date/Time | 08/11/2019 18:14:00 (-0400) |
| Conducted By (Name) | |
| Software Used | Tableau |
| Write Blocker | Tableau TD2 (X29946) |
| Image Type | E01 |
| Compression | None |
| Block Size | 64 |
| Cyclic Redundancy Check (CRC) | 64 |
| MD5 | 13e7ad6132719bae78d849e3fb914ec2 |
| SHA1 | 465c7bf5f62aebb6c98ecfc60534110f56274c25 |
| Image Verified | No |
| Imaging Workstation | N/A |
| Notes | Imaging cancelled by Lidsky prior to verification completion. Subsequent hash match confirmed (see info under evidence details). |
| Imaging started: 2019-08-11 16:43 Imaging finished: 2019-08-11 18:14 |