Posts

Casey Anthony: The State's Evidence

Image
A Defining Case for Digital Forensics Few cases shook the digital forensics world like the Casey Anthony trial. Not only did the Casey Anthony case create a nationwide media fervor, it was the first to put digital evidence on trial itself, and a case that left the field with hard-earned lessons.   During our research for our multi-part podcast series on Casey Anthony, we reviewed how forensic experts navigated the complexities of technology to piece together a narrative that gripped the nation. Digital forensics played a pivotal role in the Casey Anthony case , particularly through the examination of internet history and digital devices. Experts like Sandra Osborne and Kevin Stinger from the Orange County Sheriff's Office provided crucial testimony, highlighting the challenges of interpreting digital evidence amidst conflicting results and technical nuances. Here are some key takeaways from the Parsing the Truth podcast episode S1 E11: The State's Forensic Experts.  Sandra Osb...

Epstein - Where are raw the Jail Videos?

Image
The Epstein FBI evidence list has been released, but where are the raw jail videos? You can access the evidence list here . I've reviewed this evidence specifically looking for any hint of the Epstein jail videos that were released earlier this month. I'm also looking for any indications that the FBI Computer Analysis Response Team (CART) handled that evidence. FYI - I am a former FBI Senior Forensic Examiner who was part of CART. Everything that is logged into the FBI evidence control system is given a 1B number if it's bulky evidence. This evidence sits in the evidence control room. The first piece of evidence will be assigned the 1B number 1B1. The numbers are incremented as evidence is received. This list also contains 1D numbers, which are ELSUR evidence - think wire taps and things of that nature. It's controlled by ELSUR and is stored and tracked separately from the 1B items. The 1B numbers in this case, 50D-NY-3027571, list start at 1B1 and end at 1B146. There a...

Missing Minutes in Epstein Jail Video - How many minutes are really missing?

Image
We're breaking down everything you need to know about the raw Epstein video. Are 3 minutes missing? Or are 6 minutes and 34 seconds missing?* Epstein has been continuously in the news, and things got a little more heated shortly after the  FBI memo  that was released on July 7, 2025, shared links to download the "raw" and enhanced videos from August 9 - 10, 2005, documenting the final hours before Epstein's death. On July 8, 2025, Bondi explained the missing minute was due to a system reboot .  On July 16, 2025, WIRED reported that  2  minutes  and 53 seconds  were missing from one of the two videos used to create the "raw" video.  Finally, on July 21, 2025, WIRED released a podcast episode they said would explain their analysis of the video, but they didn't explain anything. WIRED failed to provide any details that would allow us to reproduce their findings. Stacy Eldridge and Becky Passmore were not satisfied with the reporting on the metadat...

Restore old right click menu in Windows 11

Image
 I am not a fan of Windows 11. I'm not sure what's worse Windows 11 or Windows ME... That's how much I dislike it. What do I loathe most about Windows 11? The fact that the Context Menu (when you right click) has changed, and nearly everything I want to do requires me to now make another click and select 'Show More Options'. It drives me insane. Here's the fix for that. Get back to the old right click menu that we have known and loved for over two decades in 3 short steps. 1. Open a command prompt with admin rights 2. Type the following command in the command prompt and press enter: reg.exe add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /f /ve 3. Restart your Windows 11 computer for the changes to be applied.

Digital Forensics Exams Aren't Linear

Image
Current Situation. I'm just sitting here taking notes about my case notes from a recent iPhone exam. It's not uncommon for me to do this, especially when the case is huge and I've had to dig through lots of different artifacts.  Now, you're wondering why my case notes are so disorganized. They're not. I was following the evidence. They're organized in that fashion. The problem is that looking for and finding the answer to one question can often leads to more questions - probably 3 to 5 more questions. I keep going down the rabbit hole looking for answers to the question. Sometimes I have to jump back up to the top once I've either found the answer or realize it was just a shiny object and should have never been followed. Knowing what doesn't relate to the case can be just as important as the things that do. Why do I do this? Why am I taking notes about my notes? I'm backing farther out and looking at the case from the 10,000 foot view. This helps me ...

Let me show the bias in AI

Image
 I made a little action figure of myself, and in the process, AI taught me about its bias.  The first action figure has a smile that is waaay too much, a little psychotic IMO. I said reduce the smile by 20%. That's all I said. Then, I looked at what happened in the second picture AI made. No smile, flat hair, an examiner who looks utterly depressed. AI like so many before it are still saying you better smile buttercup. I can even show the bias. Take a look here.     The first graphic   The second graphic With a 20% smile reduction...

Top 3 reasons we're Dispassionate Scientists

Image
  Why is being a dispassionate scientist one of the core traits of a digital forensics examiner? ✔ We must objectively analyze all of the evidence ✔ We must clearly present the facts of the case ✔ Our opinions are informed by the facts, not by our personal feelings or judgments Being a dispassionate scientist allows us to follow the evidence to find all the facts in the case. Good or bad.