HJBP: "Alright, Ms. Burdick, you may continue."
LDB: "Thank you. Detective Osborne, I believe we ended by talking about your evaluating information that was preserved and extracted from the hard drive."
SO: "That's correct."
LDB: "What information does NCASE provide?"
SO: "When you look at a hard drive, a complete view, it's called a physical view of a hard drive it shows you every bit on the hard drive, every bit of information that's there. Every bit of information that has even been there that is still stored on the drive. So I can see what the user sees in allocated space, I can system files that the operating system uses to operate itself I can see the file system on the hard drive that's stored and used by the operating system that I can I can also see the deleted areas called unallocated space
LDB: "On the HP in particular, the Hewlett Packard, before or perhaps during the process of your evaluation with NCASE do you record the date and time that is on the computer when you receive it?"
SO: "Yes."
LDB: "How is that done?"
SO: "That is done by booting the computer into an area called the bios, once I remove the hard drive of the computer, I'll power it on and there's a function key that will get me into that system area and I can tell, I can access the system clock and get the current date and time that it is set to."
LDB: "And did you do that for the hp?"
SO: "I did."
LDB: "And can you give us the data that you were able to obtain and then as it related to the current date and time."
(witness thumbs through)
SO: "The actual date and time that I conducted that was July the 18th 2008 at 12:12pm. The system clock setting of the computer at that time was July the 18th 2008 at 12:13pm. So it was right on the money."
LDB: "What sort of software was loaded onto that computer?"
SO: "Microsoft Windows XP is the operating system that was loaded there. Windows Internet Explorer was loaded as an application to access the Internet. Mozilla FireFox is also another method of getting onto the Internet, another browser. Um, Microsoft applications for creating XL spreadsheets, Word documents, things like that. Um, Facebook, MySpace had been accessed and loaded into the user areas. AIM, AOL, peer-to-peer social networking sites were also loaded on. Yahoo messenger was also included and many other that I don't recall and didn't record."