Recent advancements in the world of computing have made it possible to access all kinds of information. This information can be utilized for a number of purposes and unfortunately, it can also be used for criminal activity. In an effort to clamp down on the digital crime wave, a new branch in law enforcement was established to look closely into crimes of this nature. It is called computer or digital forensics.
Computer Forensics at a Glance
The branch of digital forensics was formed in order to assist law enforcement agencies with crimes that deal with digital data, software, or computer programs. Digital evidence has become a huge part of criminal investigations recently, which has greatly expanded the scope for analysis of crimes. In fact, there have been many cases that have been decided by digital evidence in the courtroom (which we will get to soon).
The digital evidence used for criminal investigation is processed in four steps. In the first step, the evidence is assessed in the context of the case to determine if they can be permitted as evidence or otherwise.
Once it is determined as permissible as evidence, the acquisition of evidence takes place. This step is fragile in nature; proper handling of the evidence must be taken to avoid damaging or altering the said evidence. Once preserved and copied, the digital evidence goes through the examination process. And the final step is the documenting and reporting of the evidence. This will make the evidence available for further forensic processing.
There are different aspects to a computer forensics examination that are designed to facilitate criminal investigation. It uses technology as the main tool in the preservation of the evidence, examination of evidence, and further analysis of the criminal activity and digital footprint.
Below are some of the examples of digital forensic and its applications in an actual case.
- Forensic Imaging – To ensure that the authenticity and integrity of the data is preserved, the original media is copied and physically inspected. The goal is to ensure there are backup copies in any event the original is lost or destroyed (especially since digital data is highly vulnerable).
- Recovery of Deleted Files – There are instances during criminal investigation when finding digital evidence involves recovering deleted files. Criminals try to eliminate traces of digital footprint that would tie them to the crime. However, with the help of computer forensics, these deleted files can be recovered and used for the forensic investigation as evidence.
- Analysis of Digital Evidence – There are notable technologies used to analyze forensic data that has been gathered. Any action taken to collect and analyze the digital evidence must not compromise the integrity of such evidence.
Examples of Cases Involving Digital Forensics
Below are examples of cases that were solved involving digital forensics analysis and investigation.
Case 1: Mikayla Munn, 2016
Mikayla Munn is a student at the Manchester University who gave birth to a baby in the bath tub of her dorm room. The case filed against her claimed that she drowned the baby in the bath tub. Her defense team, however, claimed that she was not aware that she was having labor pains and the baby’s death is an accident.
This was falsified by forensic evidence that was collected by the investigators. Computer forensics were able to determine that she conducted Google searches for various terms including “at home abortions” and “ways to cut the umbilical cord of a baby”. The evidence was strong enough that she pleaded guilty and was sentenced to 9 years in prison.
Case 2: Matt Baker, 2010
Matt Baker’s case is another one that was solved with the aid of digital forensics. In 2006, his wife died in what appeared to be a suicide. There was also a suicide note to support the initial theory.
However, further examination revealed that Baker had something to do with the death of his wife. A search of his computer history revealed that he searched for terms like “overdosing on sleeping pills” on his personal computer. His computer activity also included looking into various pharmaceutical websites prior to his wife’s death. The case was eventually ruled as a homicide due to overdose on sleeping pills. Baker was sentenced to 65 years in prison.
Case 3: Ross Comptown, 2017
This 2017 case is an example of insurance fraud that was clamped down due to digital forensics. The Middletown, Ohio man set his own house on fire to make an insurance claim. Unfortunately, his cardiac pacemaker recorded data that a cardiologist later concluded would make it improbable to explain the series of events that transpired during the incident. Specifically, the pacemaker readouts did not correspond with the stressful activity that Comptown claimed he was undertaking in the moments during the fire. This led the investigation team, and later the court, to conclude that the house fire was staged by him in order to make a false insurance claim.
