LDB: "Have you yourself attended many trainings in the area?"
KS: "I have, as I stated I have attended all the conferences of IASIS since 1996 and attended training through guidance software both in classes and in conferences where i have not only attended training but I have presenting training classes I've also attended training through classes put on by a company called access data and another company called syquest. I've presented classes for the university of central Florida both as a lecturer and a subject matter expert."
LDB: "Have you ever had the opportunity to testify in court as an expert in computer forensics?"
KS: "I've testified in both state and federal court and as expert in computer forensics."
LDB: "your Honor at this time we would tender the witness for either voir dire or submission as an expert who can give opinions."
JB: "No objections sir."
HJBP: "Okay, ladies and gentlemen of the jury Sergeant Stenger. will be accepted as an expert witness in the area of forensic computer analysis. You may proceed."
LDB: "Thank you. Sergeant Stenger in connection with your employment at the Orange County Sheriff's Office were you supervising Sandra Osborne in the recovery of information seized or given to the Sheriff's Office by the Anthony family?"
KS: "I was."
LDB: "Okay can you explain to the jury what your role was in this endeavor?"
KS: "As far as the examination goes, I would review Det. Osborne's work, in the field it is referred to as peer review where you have somebody else go back over you examination in addition if Detective Osborne encountered something that she was unfamiliar with I would assist her with it."
LDB: "Were you made aware of a keyword search for the word chloroform that was done on the HP?"
KS: "I was."
LDB: "Once you were made aware of that search did you take an active role in an attempt to preserve the information as a result of the keyword search?"
KS: "I did, Detective Osborne observed a search hit for the word chloroform on the computer and asked my assistance in identifying in what context that word appeared she knew it was an internet search but she was unfamiliar of the structure of what it was in. this particular keyword was in what is called unallocated space."
LDB: "What is that?"
KS: "Many of you I'm sure are aware that when you delete a file, it is not necessarily gone. The best analogy I have for you as far as what unallocated space it, is a library. Many people use different types of analogies but the library is probably the easiest. Hopefully most of you remember back in the days when they had card catalogs, you used to go and look up the name of your book in the card catalog you would then find out where that book was stored on the shelves. Computers use something similar. In order for a computer to find a file, it has to essentially look up the name of that file before it can go out on a hard drive and locate it. What happens when something becomes unallocated is that that card that entry essentially gets destroyed and there is not longer any reference as to where that file is on the hard drive, however the data out there is still there. That book is still on the shelf. So, the information was still out there. I recognized what type of file that was from the structure as an internet history record from Mozilla FireFox. It is an old version of Mozilla in what is called a Morq data base. Yes, supposedly the developer was evidently a fan of the television show."
LDB: "So what is Mozilla FireFox?"
KS: "It is an Internet history browser. I'm sure most of you are familiar with Microsoft Internet Explorer, Mozilla FireFox is another type of Internet history browser."
LDB: "Do you have knowledge if this history browser automatically deletes history, does it clear the history on it's own or is that done manually by a user? "
KS: "I am not aware that it clears records automatically. It's possible, I would imagine to set it to do so... but uh, normally it does not do it automatically."