Forensics on a single CD-Rom Disc
Is there a way to find out information as to what device created the data on a CD-Rom in addition to when the disk was formatted and burned? I have a friend facing criminal charges based solely on a disk that was found in his home. He does not own a device capable of burning or even reading a CD-Rom. He believes the disk was created and planted by a specific individual. It would be helpful to identify the make/model of device it was burned on and the dates and times that it was formatted and the disk was created. Would a digital forensics expert be able to extract this type of information simply from a Disk? We are willing to pay someone. Just to note, it is a file that contains several pictures and videos. It is not an audio or playable DVD disk.
compact-disc digital-signature forensics
asked Jan 23 at 8:57
Kelly TKelly T
11
add a comment |
Is there a way to find out information as to what device created the data on a CD-Rom in addition to when the disk was formatted and burned? I have a friend facing criminal charges based solely on a disk that was found in his home. He does not own a device capable of burning or even reading a CD-Rom. He believes the disk was created and planted by a specific individual. It would be helpful to identify the make/model of device it was burned on and the dates and times that it was formatted and the disk was created. Would a digital forensics expert be able to extract this type of information simply from a Disk? We are willing to pay someone. Just to note, it is a file that contains several pictures and videos. It is not an audio or playable DVD disk.
compact-disc digital-signature forensics
asked Jan 23 at 8:57
Kelly TKelly T
11
1
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
1
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34
add a comment |
Is there a way to find out information as to what device created the data on a CD-Rom in addition to when the disk was formatted and burned? I have a friend facing criminal charges based solely on a disk that was found in his home. He does not own a device capable of burning or even reading a CD-Rom. He believes the disk was created and planted by a specific individual. It would be helpful to identify the make/model of device it was burned on and the dates and times that it was formatted and the disk was created. Would a digital forensics expert be able to extract this type of information simply from a Disk? We are willing to pay someone. Just to note, it is a file that contains several pictures and videos. It is not an audio or playable DVD disk.
compact-disc digital-signature forensics
asked Jan 23 at 8:57
Kelly TKelly T
11
Is there a way to find out information as to what device created the data on a CD-Rom in addition to when the disk was formatted and burned? I have a friend facing criminal charges based solely on a disk that was found in his home. He does not own a device capable of burning or even reading a CD-Rom. He believes the disk was created and planted by a specific individual. It would be helpful to identify the make/model of device it was burned on and the dates and times that it was formatted and the disk was created. Would a digital forensics expert be able to extract this type of information simply from a Disk? We are willing to pay someone. Just to note, it is a file that contains several pictures and videos. It is not an audio or playable DVD disk.
compact-disc digital-signature forensics
compact-disc digital-signature forensics
asked Jan 23 at 8:57
Kelly TKelly T
11
asked Jan 23 at 8:57
Kelly TKelly T
11
edited Jan 23 at 9:04
Kelly T
asked Jan 23 at 8:57
Kelly TKelly T
11
asked Jan 23 at 8:57
Kelly TKelly T
11
asked Jan 23 at 8:57
Kelly TKelly T
11
11
1
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
1
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34
add a comment |
1
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
1
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34
1
1
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
1
1
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1397344%2fforensics-on-a-single-cd-rom-disc%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1397344%2fforensics-on-a-single-cd-rom-disc%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Not sure this is on topic for SU. Anyway, is the disk not in the possession of the authorities?
– spikey_richie
Jan 23 at 8:59
1
System date and almost any IDs, type descriptions can be changed on the device used for burning fairly easily. So even getting those probably wouldn't prove anything. You probably need to start in another direction.
– Máté Juhász
Jan 23 at 9:05
See this....researchgate.net/publication/…
– Moab
Jan 23 at 14:03
Yes, the disk is in the possession of the authorities, but as official evidence in a case, can be examined by the defense at the request of the attorney. The authorities are not interested in finding out who created the disk as much as using the contents for prosecution. The person that likely created the disk, isn't savvy enough to cover their tracks by changing information prior to burning it.
– Kelly T
Jan 24 at 20:34