State v. Bradley Cooper 4-12-2011

[Palomine]

wral WRAL NEWS in NC
FBI agent says he wasn't aware of the tampering allegation & did no special investigation into that issue. He wasn't asked to. #coopertrial

 

[grommet]

Can our resident computer techs comment on this? Does this mean anything?

http://en.wikipedia.org/wiki/Index.dat

According to the article:

"The index.dat file is a database file. It is a repository of information such as web URLs, search queries and recently opened files. Its purpose is to enable quick access to data used by Internet Explorer. For example, every web address visited is stored in the index.dat file, allowing Internet Explorer to quickly find Autocomplete matches as the user types a web address. The index.dat file is user-specific and is open as long a user is logged on in Windows. Separate index.dat files exist for the Internet Explorer history, cache, and cookies."

 

[SleuthinNC]

What a slap in the FBI's face. What in the world would their motive be? Preposterous!!!

They are not accusing FBI they are accusing CPD.

 

[Tipstaff]

What a slap in the FBI's face. What in the world would their motive be? Preposterous!!!

Can't find someone to fill the bill for 'some other dude did it' attack the CPD and FBI - seems to be defense position.

 

[luckyme]

wral WRAL NEWS in NC
FBI agent Gregory Johnson agrees with defense & says he doesn't know why or how all 690 files on Brad's computer were modified. #coopertrial

Really? weird. Thanks for the update. I was so falling off of fence. :fence:

 

[PolkSaladAnnie]

Innocent until PROVEN guilty beyond a reasonable doubt. I think I'm a pretty reasonable person.

Edited to fix typo.

Nope, never stated you were unreasonable :waitasec:

Innocent until proven guilty in a court of law - YES!
As to for general public? Entitled to our own opinions, beliefs and ..... views. Irrespective of a court of law. We're all at lib to state, view, comment freely.

I freely add that this (below human substitute of a) man, BC, is ... more than as guilty as the word SIN itself. IMOO! But that's entirely my personal opinion. I do not denounce opinions that differ. Free 'n fair world.

Just sayin ...

 

[lib's mom]

Lawyers "bank" on it!

Absolutely. Lots of yummy billable hours in negotations.

 

[Palomine]

wral WRAL NEWS in NC
Nancy Cooper's brother, Jeff Rentz, just flew in from Canada and has joined family in the courtroom again. #coopertrial

 

[RobT]

Can our resident computer techs comment on this? Does this mean anything?

Index.dat keeps a record of web sites visited and email checked through Outlook. So for example if Outlook or Internet Explorer (or for that matter the automatic updates engine which runs through IE) started up when the computer was booted that file would be modified but not in any appreciable way that would destroy the logs that were already present.

 

[grommet]

http://en.wikipedia.org/wiki/Index.dat

According to the article:

"The index.dat file is a database file. It is a repository of information such as web URLs, search queries and recently opened files. Its purpose is to enable quick access to data used by Internet Explorer. For example, every web address visited is stored in the index.dat file, allowing Internet Explorer to quickly find Autocomplete matches as the user types a web address. The index.dat file is user-specific and is open as long a user is logged on in Windows. Separate index.dat files exist for the Internet Explorer history, cache, and cookies."

It makes complete sense that this file would get updated if someone fired up the computer and Internet Explorer in it's original state. But I expect that LE would simply physically remove the hard drive and analyze it separately. Hence - no updates to any of the time stamps since it exists separate from the original computer and OS.

 

[SleuthinNC]

If the prosecution follows this testimony up with another batch of "don't forget BC is a bad dude" testimony from JR, this case is about over and their smoking gun was left on the cutting room floor.

 

[PolkSaladAnnie]

What a slap in the FBI's face. What in the world would their motive be? Preposterous!!!

Lordie be! Tell me more .... what's up? :maddening:

 

[Palomine]

Can our resident computer techs comment on this? Does this mean anything?

No when they accessed these files the modified date changed
every time you access something on your computer the date changes

 

[hotpinkstef]

how much you wanna bet jz is the next witness after the fbi guys?

 

[ohiogirl]

Index.dat keeps a record of web sites visited and email checked through Outlook. So for example if Outlook or Internet Explorer (or for that matter the automatic updates engine which runs through IE) started up when the computer was booted that file would be modified but not in any appreciable way that would destroy the logs that were already present.

So, a forensic computer analyst would know the difference between an automatic update and someone actually using the computer?

 

[Palomine]

I doubt Brad was using Internet Explorer for his browser...being an IT guy and all

 

[iucpa]

#coopertrial just broke wide open...apparently files modified on Brad's computer once it was out of his possession.

 

[RobT]

It makes complete sense that this file would get updated if someone fired up the computer and Internet Explorer in it's original state. But I expect that LE would simply physically remove the hard drive and analyze it separately. Hence - no updates to any of the time stamps since it exists separate from the original computer and OS.

I would suspect that a computer forensics engineer would do exactly such... I would not expect that a detective with CPD wouldn't simply power it up though to see if it was password protected, which would do the same thing if the laptop had just gone to sleep rather than being powered down.

 

[SleuthinNC]

I think this is why the defense was so keen to know how the FBI retrieved their data, to make sure nothing they did would have caused the files to be updated. So what then is the explanation?

 

[Palomine]

So, a forensic computer analyst would know the difference between an automatic update and someone actually using the computer?

the only way I know I have been updated is my computer is off...I never shut off my desktops