BIO
Michael Harrington
Michael Harrington is a former Detective Sergeant with the Michigan State Police Computer Crimes Unit. A sworn law enforcement officer with the Michigan State Police since 1995, he joined the Computer Crimes Unit at its inception in November of 2000.
He is a frequent instructor in the field of computer forensics, having taught across the United States, Europe and Asia. He served as the International High Tech Crime Investigator’s Association Treasurer in 2004 and Secretary in 2005. In addition, he is the past president of the Michigan Chapter of the HTCIA. In addition to this blog, Michael also writes articles on mobile forensics for industry magazines such as DFI News.
Mr. Harrington is the Director of Training and Services for Teel Technologies and holds Certificates for Certified Forensic Computer Examiner (CFCE) and EnCase Certified Examiner (EnCE).
Email Michael at linuxchimp-at-gmail-dot-com.
Michael,
We fixed the bug you identified in your blog. Can you please make the necessary corrections in the blog. It is stating we have not taken care of this bug. Susteen acted immediately to correct the issue and solved it within 72 hrs once we knew of the issue.
Thank you,
Javier
FYI, you may want to re-word this on your “Blackberry Forensics” blog:
I recommend making a working copy and a archive copy. Now reseal and store your exhibit.
Recommend? That’s a mandate period.
“After you’ve made a working copy and an archive, reseal and store your exhibit”
Remember, the key is to keep evidence as taint free as possible while obtaining bit by bit copies for analysis afterwards. Your message can be misinterpretted by newcomers to forensics where one small mistake such as working on a live copy can render that evidence useless.
Sincerely
Jesus Oquendo
http://www.linkedin.com/in/voipsec