Friday, July 22, 2005

Hong Kong Parkview milkshake murder trial

More forensics from the Hong Kong Police IT guys in the trial of Nancy Kissel. They looked at Mr Kissel's computer and found evidence he had been googling for sex. The forensics also unearthed the fact that there is not much online about sex in Hong Kong. Errh, discuss. All that and more in the Standard.
Maybe Kissel thought his web browser's Clear History, Clear Cookies, etc was enough?
If he ever bothered to clean up after such searches. Wrong. Evidence is also elsewhere.
House-keeping tips: On XP, wipe the contents of the following folders (assuming log on as Administrator each time):
C:\Documents and Settings\Administrator\Cookies

C:\Documents and Settings\Administrator\Favorites\Links
C:\Documents and Settings\Administrator\Recent\

C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\
C:\Documents and Settings\Administrator\Local Settings\Temp
Oh, and empty the Recycle Bin.
Having done all that, the seriously paranoid will then run Disk Defragmenter. Doing so will re-arrange and compact existing files and write over most of any remaining traces of already deleted files. That'll really stymie the forensics.

No comments: