Forensics question

[jaffy1229]

Here's a scenario. Lets say my computer is being examined by the police. If they tamper with any of the information on the hard drive, could they do so without leaving any evidence of what they have done?

For example, what if they changed a filename to read something else to make it look incriminating? How could you prove independently, that filename was changed? (or not)

Cheers,
jaffy

 

[adarsh]

You can check it yourself in the properties.
In the File Properties, it'll show when it was "Modified".

 

[red onion]

You can check it yourself in the properties.
In the File Properties, it'll show when it was "Modified".

Not really...they could roll the calendar back 6 months...save the file...then change the calendar back.

 

[tlarkin]

Here's a scenario. Lets say my computer is being examined by the police. If they tamper with any of the information on the hard drive, could they do so without leaving any evidence of what they have done?

For example, what if they changed a filename to read something else to make it look incriminating? How could you prove independently, that filename was changed? (or not)

Cheers,
jaffy

Stop doing illegal stuff with your computer and you have nothing to worry about.

 

[adarsh]

I agree.
But would you think about rolling back the calendar back 6 months after you rename a file?

 

[tlarkin]

I agree.
But would you think about rolling back the calendar back 6 months after you rename a file?

You can't modify the meta data, and what the hell are you talking about rolling back? You mean like a system restore to a previous date?

There are tools to help you modify meta data, but that is not relevant at all. Illegal content is illegal content. If they put something on your computer it will have a creation date, that date technically can not be modified with out some tooling around.

The whole scenario is ridiculous, and there are so many cyber crimes to begin with, why in the hell would any LEO plant evidence on your computer unless it was personal? It creates more work for them.

 

[adarsh]

tlarkin, I'm not the one who suggested that.
Please read the post properly. It was red_onion who suggested that.

 

[Daniels2386]

why are they "going" through your computer anyways? Save your stuff, reformat, and let them look all they want...tell them you caught a nasty virus if they ask lol

 

[Sir Travis D]

lol get one of those hard drive melt down kits.. Something about hitting certain keys and it ruins the HD... I would make backups to an external hdd and hide it somewhere underground.. Then press the button