Skip to content
Dzhokhar Tsarnaev— Case Archive
evidenceevidencedigital2015 Federal TrialMissing Patriot thumb drive identified by its volume serial number; no forensic image was availableSpencer identified the missing Patriot thumb drive by its known volume serial number because no forensic image was available. A jump list on another computer pointed to Complete Inspire on that drive and recorded a creation date of January 21, 2012. Spencer explained that creation dates can reflect copying or moving rather than original authorship and treated the copying sequence as an inference.
← All Evidence
Digital Evidence

Missing Patriot thumb drive identified by its volume serial number; no forensic image was available

Spencer identified the missing Patriot thumb drive by its known volume serial number because no forensic image was available. A jump list on another computer pointed to Complete Inspire on that drive and recorded a creation date of January 21, 2012. Spencer explained that creation dates can reflect copying or moving rather than original authorship and treated the copying sequence as an inference.

1 proceeding1 mention1 trial

About

Spencer used indirect artifacts to infer a copying route for Complete Inspire through the Patriot drive to the Sony, without identifying the copying operator or establishing the drive's later whereabouts.

Trial Record (1)