Forensic Analysis Uncovers Child Pornography
592 F. 3d 779 (7th Cir 2010)
On an appeal from the Northern District of Indiana, the Seventh Circuit held that a police detective did not exceed the scope of a warrant issued to search for computer images of voyeurism when his use of computer forensics tools uncovered images of child pornography.
In May of 2007, the Lafayette Police Department of Tippecanoe County, Indiana, recovered a video camera installed by the defendant in the women’s locker room at his place of employment. The officers obtained a search warrant to search the defendant’s residence for “video tapes, CD’s or other digital media, computers, and the contents of said computers, tapes, or other electronic media, to search for images of women in locker rooms or other private areas.” Upon executing the warrant, the police department seized a desktop computer, a laptop, and an external hard drive from the defendant’s home.
Nearly two months later, a police detective began a forensic analysis of the seized equipment, utilizing Forensic Tool Kit to create a mirror image of each hard drive. Among the tools the detective used was the KFF Alert System, which indicated that four files on one hard drive contained known child pornography. The detective’s forensic analysis recovered several videos recorded inside women’s locker rooms and many images of child pornography.
When the state’s prosecutor entered one count of possession of child pornography, the defendant moved to suppress the evidence, arguing that the detective had exceeded the scope of the search warrant. The District Court denied the defendant’s motion to suppress, reasoning that the detective believed he had authority to examine any digital file on the defendant’s computers and had, therefore, discovered the images of child pornography in “plain view.”
The Seventh Circuit agreed, holding that the search was lawful except as to the four files flagged by the KFF Alert System. The Court reasoned that the images of voyeurism could have been anywhere on the computer and the files could have been manipulated to hide their contents. The detective had not abandoned his search under the warrant but had instead continued to look for images of women in locker rooms or other private areas.
The Court held that those files found by the KFF Alert System, however, should be suppressed because the Alert System specifically told the detective the files contained child pornography and could not be validly examined for voyeurism. The Court suggested that the detective should have stopped his search and sought a warrant to search for additional images of child pornography. Nonetheless, all of the other images were properly discovered during the search for images of voyeurism, leaving plenty of evidence for the state to charge the defendant with possession of child pornography.
- Staff Recognized for Departing Employee Investigations - The first issue of Corporate Counsel Business Journal, CCBJ, includes an interview with our Director of Digital Forensics, Yaniv Schiff, and Solutions Architect, Curtis Collette, on the evolution of departing employee investigations. Departing Employee: When Do Investigations Become Necessary? appeared in the print publication, online edition, and on CCBJ’s In-House Tech website. For Increasing Numbers of Employers, Departing Employee Investigations[...Read More]
- Chicago Office Food Drive – The Results Are In - QDiscovery’s Chicago Office collected nearly 1,000 containers of food for the local food bank this Holiday Season! Our office competed with sister offices in Indiana and Connecticut. Alas, we came in third. Our sister offices each collected nearly 2,000 containers for their local food banks. Relatively new to the company-wide food drive, the Forensics Division[...Read More]
- QDiscovery Forensics Team Develops Award Winning App! - QDiscovery is winner of a 2017 Relativity Innovation Award. Presented at Relativity Fest, the award celebrates organizations that create apps or integrations that extend the functionality of Relativity’s eDiscovery software. Our development team created an application that makes the analysis of mobile collections much more manageable. Relativity users can now produce and review mobile device data[...Read More]
- Moving and Changing - Acquired by Connecticut-based QDiscovery in 2016, Forensicon’s capabilities multiplied overnight, both in forensics brain power and eDiscovery expertise. As part of a leading provider of end to end litigation support, moving to larger offices that are more central to the Chicago legal community was inevitable.
- QDiscovery Named One of the Top 20 Providers of Legal Services! - Leading industry publication, CIO Magazine, has named Forensicon’s parent company, QDiscovery, to it’s Top 20 Providers of Legal Services. The annual listing includes 20 companies that are at the forefront of providing legal solutions and impacting the marketplace. Read the whole article here. Featured in the publication alongside QDiscovery President, Dave Barrett, is Director of Digital Forensics, Yaniv[...Read More]