Sandra [Cawn] Osborne testimony (computer forensics)

[truthsleuth]

Sandra Osbourne, computer forensics investigator (repeat witness)

The entire hD a search for keywords,right?
Yes.
I had the software search the entire hard drive.
You used what software?
Entrance. (??)
What search items were you asked to identify when searching the home computer?
I was initially asked to search for chlorophyll, hand sanitizers, and bamboo.
What did you do to compensate for spelling variations?
I searched for words with "chloro"?
How long did that search take?
Overnight.
Did you find any spelling of the word chlorophyll on the hard drive.
I found one place and it was with Microsoft factory installed software.
Does hand sanitizer on the hard driver, did it appear?
No. I didn't.
Did you find bamboo?
Yes bamboo figurines, bamboo furniture, household products contain bamboo.
Did you find any ref. to bamboo leaves as a causative substance?
No.

 

[truthsleuth]

SO says when a file is stored on a computer, when the file is deleted, the reference to that file is still communicated. The reference resides on the HD and says that space is available and the space still contains the file until it is overwritten.
JB: So at times files get deleted?
They get overwritten.
And it's not done in order?
No.
JB: And on the entire HD you never know what's been deleted?
It's hard to know what's been o-v-e-r-w-r-i-t-t-en. [NOT deleted, Jose, she already said that.

LDB: Is this why sometimes in unallocated space you'll have fragments?
Yes.
LDB: And when that happens it's sometimes something that has been overwritten and it is quite obvious to you?
Yes.