EFTA00128432.pdf

All Details Evidence Details Case Photographs Forensic Hardware and Sofware 0384 Report Produced: 01/31/2020 07:42:18 Produced By : Forensic Hardware and Sofware 0384 Report Produced : 01/31/2020 07:42:18 Produced By : Evidence Details Evidence Reference 0005 Evidence Type Desktop Logged In Date/Time 08/21/2019 14:15:24 (-0400) Original Seal Number N/A Priority High Description HP EliteDesk 800 S/N: 2UA4381XJW Property Number 0214207266 Archived No Pre-Imaging Details Start Date/Time 08/21/2019 14:27:41 (-0400) End Date/Time 08/21/2019 15:00:49 (-0400) Conducted By (Name) Manufacturer Hewlett Packard Model EliteDesk 800 Serial Number 2UA4381XJW Casing Type Workstation Casing Colour Black BIOS Key FI0 BIOS Date/Time 08/21/2019 15:00 Actual Date/Time 08/21/2019 15:00 Password Protected No Attachment(s) IMG 0104W.JPG Evidence Reference 0006 Evidence Type Hard Drive Logged In Date/Time 08/21/2019 14:15:25 (-0400) Original Seal Number N/A Priority High Description Seagate 500GB SATA HDD S/N: Z6E8KD3N Property Number N/A Archived No Pre-Imaging Details EFTA00128432 Start Date/Time 08/21/2019 15:04:40(-0400) Conducted By (Name) Manufacturer Seagate Model ST500DM002 Serial Number Z6E8ICD3N Type SATA HDD Imaging Details Start Date/Time 01/29/2020 11:02:45 (-0600) End Date/Time 01/29/2020 11:03:00 (-0600) Conducted By (Name) Software Used Tableau TX! SN: 000ecc5801d10f Write Blocker Tableau TX1 SN: 000ecc5801d10f Image Type E01 Compression None Block Size 64 Cyclic Redundancy Check (CRC) 64 MD5 0dd9c2ad818c4a5a58bab2f78d57f2d7 SHA1 0d78251b33302e327c56clef28e9ccc8f353bd46 Image Verified Yes Imaging Workstation Tableau TX1 SN: 000ecc5801d10f Image Destination W300M6W8 Imaging started: Thu Aug 22 03:36:11 2019 (UM-0400) Source device model: ATA ST500DM002-1BD142 Notes Log File indicates incorrect BOP Barcode. Attachment(s) Z6E8KD3N.log Evidence Reference 0007 Evidence Type Desktop Logged In Date/Time 08/21/2019 14:15:26 (-0400) Original Seal Number N/A Priority High Description HP Compaq 8200 Elite Property Number 0214107384 Archived No Pre-Imaging Details Start Date/Time 01/29/2020 11:07:30 (-0600) End Date/Time 01/29/2020 11:10:48 (-0600) Conducted By (Name) Manufacturer Hewlett Packard Model Compaq 8200 Elite Serial Number MXL14700DY Casing Type Small Form Factor Casing Colour Black BIOS Date/Time 08/22/2019 07:45 EFTA00128433 Notes Attachment(s) Case Photographs 0005: IMG_0078.JPG 2,3960_IMG_0078.JPG 0005: IMG_0079.JPG ;;3961_IMG_0079.JPG 0005: IMG_0080.JPG 2,3962_IMG_0080.JPG Actual Date/Time Password Protected Attachment(s) Evidence Reference Evidence Type Logged In Date/Time 08/21/2019 14:15:27 (-0400) Original Seal Number N/A Priority Description Property Number Archived Pit-Imaging Details Start Date/Time Conducted By (Name) Manufacturer Model Serial Number Type Imaging Details Start Date/Time End Date/Time Conducted By (Name) Software Used Write Blocker Image Type Compression Block Size 08/22/2019 07:45 No IMG 0108.JPG 0008 Hard Drive High Hitachi 500GB SATA HDD S/N: JP1572JE36LSNK N/A No 01/29/2020 12:01:44(-0600) Hitachi HDS721050CLA662 JP1572JE36LSNK SATA HDD 01/29/2020 12:02:57 (-0600) 01/29/2020 12:04:16 (-0600) Tableau TX1 SN: 000ecc5801d10f Tableau TX1 SN: 000ecc5801d10f E01 None 64 Cyclic Redundancy Check (CRC) 64 MD5 629694386155e0f49e7a8c0da0da2840 SHA1 3ac4c0fa2blcb97020e22bc3966d4b3609c89d57 Image Verified Yes Imaging Workstation Tableau TX1 SN: 000ecc5801d10f Image Destination W300M6W8 Imaging started: Thu Aug 22 03:34:35 2019 (UTC-0400) Source device model: Hitachi HDS721050CLA662 Log File indicates incorrect BOP Barcode. JP1572JE36LSNK.log EFTA00128434 0005: IMG_0081.JPG 23963_IMG_0081.JPG 0005: IMG_0082.JPG 23964_IMG_0082.JPG 0005: IMG_0083.JPG 23965_IMG_0083.JPG 0005: IMG_0084.JPG 23966_IMG_0084.JPG 0005: IMG_0085.JPG 23967_IMG_0085.JPG 0005: IMG_0086.JPG 23968_IMG_0086.JPG 0006: IMG_0087.JPG 23969_IMG_0087.JPG 0006: IMG_0088.JPG 23970_IMG_0088.JPG 0006: IMG_0089.JPG 23971_IMG_0089.JPG 0007: IMG_0090.JPG 25047_IMG_0090.JPG 0007: IMG_0091.JPG 25048_IMG_0091.JPG 0007: IMG_0092.JPG 5049_IMG_0092.JPG 0007: IMG_0093.JPG 5050_IMG_0093.JPG 0007: IMG_0094.JPG 2, 5 0 5 I _IMG_0094.JPG 0007: IMG_0095.JPG 5052_IMG_0095.JPG 0007: IMG_0096.JPG 5053_IMG_0096.JPG 0007: IMG_0097.JPG 5054_IMG_0097.JPG 0007: IMG_0098.JPG 5055_IMG_0098.JPG 0007: IMG_0099.JPG 5056_IMG_0099.JPG 0008: IMG_0100.JPG 5057_IMG_0100.JPG 0008: IMG_0101.JPG 5058_IMG_0101.JPG 0008: IMG_0102.JPG 5059_IMG_0102.JPG 0008: IMG_0103.JPG 5060_IMG_0103.JPG EFTA00128435