BIO
Michael Harrington
Michael Harrington is a Detective Sergeant with the Michigan State Police Computer Crimes Unit. A sworn law enforcement officer with the Michigan State Police since 1995 he joined the Computer Crimes Unit at its inception in November of 2000. He is a frequent instructor in the field of computer forensics, having taught across the United States and in Europe. He served as the International High Tech Crime Investigator’s Association Treasurer in 2004 and Secretary in 2005. In addition, he is the past president of the Michigan Chapter of the HTCIA. D/Sgt. Harrington holds Certificates for Certified Forensic Computer Examiner (CFCE) and EnCase Certified Examiner (EnCE).
His training site for mobile forensics is Mobile Examiner.
Email Michael at m-dot-harrington-at-northpenguin-dot-com.
March 11, 2008 at 8:44 pm
Michael,
We fixed the bug you identified in your blog. Can you please make the necessary corrections in the blog. It is stating we have not taken care of this bug. Susteen acted immediately to correct the issue and solved it within 72 hrs once we knew of the issue.
Thank you,
Javier
October 12, 2008 at 7:38 pm
FYI, you may want to re-word this on your “Blackberry Forensics” blog:
I recommend making a working copy and a archive copy. Now reseal and store your exhibit.
Recommend? That’s a mandate period.
“After you’ve made a working copy and an archive, reseal and store your exhibit”
Remember, the key is to keep evidence as taint free as possible while obtaining bit by bit copies for analysis afterwards. Your message can be misinterpretted by newcomers to forensics where one small mistake such as working on a live copy can render that evidence useless.
Sincerely
Jesus Oquendo
http://www.linkedin.com/in/voipsec