Chain of Custody - OJ Simpson case

-
Research the OJ Simpson trial. How do you think chain of custody was handled? What should have been done differently?

There was a lot of doubts due to the amount of evidence that was collected but not actually recorded using the chain of custody. This resulted in theories being created which claimed that the police and scenes of crime officers were actually planting evidence, an example of evidence that was collected but not recorded in the chain of custody would be the drops of blood that were found at the crime scene which scenes of crimes officers thought was OJ Simpsons, it was later found that test tube filled with blood was not sent straight to the lab for inspection, it was left at the police station for many hours before actually making its way to the lab to be analyzed which further increased suspicion that evidence was being tampered with. 

Everything from the crime scene should have been documented and added over to the right personnel in charge and for the time sensitive samples like blood swaps and samples should be taken directly to the lab after documentation in chain of Custody. 

Does chain of custody with digital evidence matter as much as physical evidence? 

It matters because both are evidence that need to be handled the right way in order to be used in court hence  Chain of custody is important because if evidence has been altered or it cannot be proven that it was not altered during the time between collection and use in court, then that evidence is less believable or credible. This therefore allows any evidence to be traced back to see in whose possession or charge the evidence was under when it was tampered with or lost. It also means that the evidence can be traced back to the scenes of crime officer that found and collected it at the crime scene. 

Comments

Post a Comment

Popular posts from this blog

File Signatures

-
Image
Reference Site:  https://www.garykessler.net/library/file_sigs.html   File Signature Table What are file signatures? How do they relate to file carving? How does the size between a file header and footer affect carving?  According to ("File Signatures", 2020), File Signatures or Magic Numbers are  protocol set of constant numerical and text values used to identify file format thus every file type requires a unique signature in order for an operating system to recognize it, classify it and show it to an end user.  The object of carving is to identify and extract (carve) the file based on this signature information alone. File carving is a process used in computer forensics to extract data within a block of raw data basing or searching for the magic numbers or file signatures.  Since File carving  is usually done by examining the header (the first few bytes) and footer (the last few bytes) of a file, larger distance between the footer and header will affect t...
Read more

Windows vs Linux Artifacts

-
Image
Windows uses a Registry to store system, software, and user settings. What does Linux use to store this type of information? Does Linux or Windows provide more evidence (artifacts) from a forensic analysis perspective? Please explain. According to (Imam, 2017), Linux holds many file systems of the ext family, including ext2, ext3, and ext4. Linux can provide an empirical evidence if the Linux-embedded machine is recovered from a crime scene. In this case, forensic investigators should analyze the following folders and directories. /etc    [%SystemRoot%/System32/config] This contains system configurations directory that holds separate configuration files for each application. /var/log This directory contains application logs and security logs. They are kept for 4-5 weeks. /home/$USER This directory holds user data and configuration information. /etc/passwd This directory has user account information. Including /etc/shadow, /etc/hosts, /etc/sysconfig, /etc/syslog.conf Windows pr...
Read more