why would he not include it on the report?
4/19/2011 11:26:22 AM
hahahhahaTHERE IS NO CERTIFICATION FOR THAT
4/19/2011 11:26:23 AM
Ive tried 3 different @emails.com...but nothing has let me register there...probably because if they actually allow to post on that site I will make some of those stay at home moms want to blow their brains out
4/19/2011 11:26:28 AM
The DR is getting feisty.
4/19/2011 11:26:46 AM
what is "MFT"?
4/19/2011 11:27:08 AM
4/19/2011 11:27:32 AM
^ master file table. related to the filesystem on the computer.This exchange made me lol. the 'expert' should have been prepared for this:"What version of Analyze MFT were you using?""The latest version that was on the internet""Are you certified in Analyze MFT?" "There is no certification for it" "Have you gone to any training for Analyze MFT?" "There is no training for it"
4/19/2011 11:27:46 AM
master file table is what i'm guessing in this context.
4/19/2011 11:27:53 AM
they are railroading this guy
4/19/2011 11:28:28 AM
he doesn't look very good on the stand, they are making him look stupid
4/19/2011 11:29:18 AM
REALLY? Talking about this guy not remembering when every one of his witnesses lost their memory on the stand?
4/19/2011 11:29:27 AM
THAT WOULD SEEM LOGICAL!
4/19/2011 11:29:31 AM
aww poor guyAlso, I think the judge is playing bubbleblaster
4/19/2011 11:30:15 AM
i'm pretty sure the judge is actually reading webslueths on his laptop
4/19/2011 11:31:49 AM
I was hoping for thewolfweb!Hi Judge Gessner! [Edited on April 19, 2011 at 11:35 AM. Reason : and by I mean ]
4/19/2011 11:34:16 AM
so he used stolen software for his analysis? that doesn't look good
4/19/2011 11:34:24 AM
^You are an idiot who cannot listen. He did not use an illegal copy. He did it in Cisco's forensics lab. [Edited on April 19, 2011 at 11:35 AM. Reason : ]
4/19/2011 11:35:20 AM
he said they made a copy, i took that to mean they made a copy of the software
4/19/2011 11:36:12 AM
No--he made a copy of the hard drive.
4/19/2011 11:36:35 AM
that wasn't made every clear
4/19/2011 11:37:05 AM
try to keep up
4/19/2011 11:37:51 AM
Is the jury in the room right now?
4/19/2011 11:37:55 AM
try to keep up? they are doing a good job of making this guy look like a fool. you all are mistaken if you think otherwise. i have no doubt of his qualifications, but he looks pretty bad so far.
4/19/2011 11:39:10 AM
you look pretty bad so far
4/19/2011 11:39:36 AM
ok i had a one hour meeting...what did i miss
4/19/2011 11:39:51 AM
"where did you do these examinations?""in my home""is your home an ASCLAD-certified laboratory?" (wtf is that)"no its not"
4/19/2011 11:41:14 AM
I have work to do, maybe this will pick up later
4/19/2011 11:41:57 AM
pull 'em coach - he's done.
4/19/2011 11:42:08 AM
Yeah--because computer hacking is done in a lab...
4/19/2011 11:42:12 AM
the dude came to court unprepared, not good for him being able to charge to be an expert witness. I think he knows what he is doing though, it does not sound that complex. Also he probably had som bootleg software and is kind of squirming.
4/19/2011 11:43:46 AM
ha someone told me that the SBI isn't even ASCLD certified[Edited on April 19, 2011 at 11:44 AM. Reason : fwiw, i dont' really know anything.]
4/19/2011 11:44:14 AM
ADA has zero fucking idea what he's asking.Fun.And let's all be truthful here- just because you're not certified in something doesn't mean you don't know how to use itI would say that I'm an expert in the use of say, Photoshop, but I have never taken a class or training session to reflect that.[Edited on April 19, 2011 at 11:47 AM. Reason : and WRAL's feed server fucking blows]
4/19/2011 11:44:38 AM
What are the Standard Operating Procedures for your home lab?Do you have a Cannon of Ethics in your home lab?
4/19/2011 11:45:02 AM
he probably has more of an understanding than a jury, or me, and he is doing a good job getting me to question his methodology. i would think documentation for reproducibility would be important.
4/19/2011 11:45:34 AM
Does the ADA not understand that anyone can purchase Cisco equipment??
4/19/2011 11:46:11 AM
It seems like the ADA doesnt understand much except how to waste everyone's time
4/19/2011 11:50:02 AM
dammit i can't find the latest WRAL article....i wanna see what the GOLOers are saying
4/19/2011 11:50:19 AM
It seems to me that the defense has done him a disservice by not telling him the results would be part of a murder case. He might have had a chance to better document his methods.
4/19/2011 11:50:50 AM
he's fucked.This is painful.
4/19/2011 11:52:30 AM
dude you're wrong, try to keep up/walkmanfades &bethoven
4/19/2011 11:53:41 AM
BTW that guy sitting on the end in the first row in the black jacket is an FBI agent, perhaps one of the previous witnessesLOL at him being revealedand guys, i don't think he's fucked - this is SOP for lawyers, they get aggressive and try to throw off your reactions in the hope that they can catch one little thing and pull at itADA Boz doesn't know what he's hitting at though, so he's just flinging shit and hoping it sticks[Edited on April 19, 2011 at 11:55 AM. Reason : .]
4/19/2011 11:53:48 AM
4/19/2011 11:55:13 AM
you mean when i asked a question about an unclear statement? ok
4/19/2011 11:59:37 AM
OFFICER CHAPEL, YOU SAY????cover=BLOWN
4/19/2011 12:00:32 PM
i really don't think it's going well
4/19/2011 12:02:31 PM
oh man mr ward is getting slammed by the ada
4/19/2011 12:03:17 PM
i think the fact that there is no way to reproduce his results kills him as an expert witness more than any lack of training on specific software
4/19/2011 12:03:35 PM
His results exactly match the FBI results--so are their results called into question as well?
4/19/2011 12:04:15 PM
do they have standard procedures and methods and have documentation of each step they did?
4/19/2011 12:05:06 PM
the FBI? No--because they're hiding under the shield of National Security.
4/19/2011 12:05:28 PM