Cary Police Destroy Evidence Part 1

Summary

In a courtroom setting, a detective discusses the intricacies of accessing data from a locked BlackBerry phone. The dialogue reveals the detective's limited understanding of digital forensics, particularly regarding the volatile nature of electronic data. During an interaction with AT&T, he receives instructions for unlocking the device using a PUC code but fails to document critical details. As he recounts his actions, concerns arise about potential data loss, culminating in the phone being wiped. The exchange highlights the challenges of handling digital evidence and the importance of proper procedures in forensic investigations.

Takeaways

• 📱 The detective had limited knowledge about the types of data stored on cell phones, specifically regarding their volatility and storage.
• 🔍 There was no forensic training received by the detective regarding the handling of cellular devices and their data.
• 🗓️ The investigation took place in August 2008, during which the detective examined a locked BlackBerry phone.
• 📞 The detective communicated with AT&T's subpoena compliance center to request access to the phone's data.
• 🔑 Instructions provided by AT&T included entering incorrect passwords until prompted for a PUC code, which the detective later failed to document.
• ⚠️ The detective was not concerned about a screen warning that data might be destroyed when trying to unlock the phone.
• 🚫 Due to procedural errors, the attempt to unlock the phone led to the wiping of its data.
• 🤔 The detective demonstrated a lack of understanding of what a SIM card is and its relevance to the phone's operation.
• 📝 Important procedural steps were not recorded in the detective's notes, leading to reliance on memory during critical actions.
• 📅 The communication of the data loss incident to the defense occurred much later, indicating possible delays in reporting significant findings.

Q & A

What type of information is typically contained on a cell phone according to the detective?

The detective understood that cell phones typically contain call history, text messages, and possibly other types of data, although he admitted his knowledge was limited.

Did the detective have any forensic training related to cellular phones at the time of the investigation?

No, the detective indicated that he had not received any forensic training on cellular phones.

What was the detective's understanding of digital data volatility in August 2008?

The detective had no reason to believe that digital data was volatile and did not recognize the potential for data loss during the examination of the phone.

What did the detective do to access Mr. Cooper's cell phone?

The detective contacted AT&T's subpoena compliance center to request assistance in accessing the locked cell phone, providing the circumstances surrounding the case.

What specific instructions did the AT&T representative provide for unlocking the phone?

The representative advised the detective to enter incorrect passwords until prompted for the PUC code, which would then allow access to the phone.

Why did the detective fail to document the instructions given by AT&T?

The detective did not document the specific sequence of instructions provided by AT&T because he relied on memory after the phone call.

What consequence resulted from the detective's attempt to unlock the phone using the PUC code?

The process of attempting to unlock the phone resulted in the wiping of all data on the BlackBerry device.

What did the detective say about his understanding of SIM cards?

The detective admitted he was unaware of what a SIM card is and did not understand its significance in relation to the BlackBerry device.

When did the detective inform the defense that the phone had been wiped?

The detective transmitted the information regarding the wiped phone to the defense on June 5, 2009, which was nearly a year after the data loss occurred.

What overall technical awareness did the detective exhibit during the testimony?

The detective exhibited a significant lack of technical awareness regarding cell phone technology and the processes involved in handling digital evidence.