GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital...

14
com GPS Forensics www.robsonforensic.com ROBSON FORENSIC EXPERT Matthew Peterson, CFCE DIGITAL FORENSICS

Transcript of GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital...

Page 1: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com www.robsonforensic.

com

GPS Forensics

www.robsonforensic.com

ROBSON FORENSIC EXPERT

Matthew Peterson, CFCE

DIGITAL FORENSICS

Page 2: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Summary

• Background

• What is GPS Forensics?

• Cases and Devices with Location Data

• Real Data, Real Issues, Real Pitfalls

• Discussion/Questions

**Videos and select information redacted for web-posting**

Page 3: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Background

US Coast Guard

• Maritime Navigation and Law Enforcement.

• Provided digital forensic support to over 12 other

.,Federal, State, and Local Agencies.

• Extracted/Analyzed Hundreds of GPS units.

Certified Forensic Computer Examiner (CFCE)

Cellebrite Certified Physical Analyst (CCPA)

Page 4: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

GPS Forensics – Legal Realm

Page 5: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Location Data Applicability

Nearly any type of case in which location, timing,

and activities are a factor.

• Distracted Driving

• Dram Shop

• Adult/Child Supervision

• Fire and Explosion

• Workplace Safety

• …

Page 6: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Devices with Location Data

• Cellular Phones / Smart Phones

• Laptops with GPS Feed (maritime)

• GPS Navigation Units

•Hiking • Bicycling • Maritime • Automotive

• Vehicle Infotainment / Telematics Systems

• Fitness Trackers

• Other Mobile Devices

Page 7: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Real Data, Real Issues

Page 8: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Smart Phones Filename 20160106_203538.jpg

Make samsungModel SPH-L720Software L720VPUGOK3

DateTime 2016:01:01 20:35:38DateTimeOriginal 2016:01:01 20:35:38

DateTimeDigitized 2016:01:01 20:35:38GPS information:GPSVersionID 2.2.0.0

GPSLatitudeRef NGPSLatitude 40 2 38.8392 (40.044122)

GPSLongitudeRef WGPSLongitude 76 18 27.1008 (76.307528)GPSTimeStamp 20 35 38

GPSDateStamp 2016:01:06SceneCaptureType Night scene

Select Metadata

Page 9: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Analysis & Presentation

Present as PDF, Excel, or Native Format?

Page 10: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 11: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 12: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Vehicle Infotainment Systems

Page 13: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 14: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Contact Information

Matthew Peterson, CFCE

Digital Forensics

206.262.7923

[email protected]

www.robsonforensic.com

http://www.robsonforensic.com/

Text Extracted

Text Extracted

Forensic DNA Analysis on Microfluidic Devices: A Reviewprojects.nfstc.org/tech_transition/rapidbio/pdf/Horsman-et-al... · Motivation With the backlog of DNA evidence to be analyzed

Forensic DNA Analysis on Microfluidic Devices: A Reviewprojects.nfstc.org/tech_transition/rapidbio/pdf/Horsman-et-al... · Motivation With the backlog of DNA evidence to be analyzed

Forensic Anthropology Forensic Anthropology

Forensic Anthropology Forensic Anthropology

Occurrence of brown adipocytes in rat white adipose tissue ... · fat pads of rat analyzed by Northern blotting experiments. A 20 µ g sample of total RNA extracted from different

Occurrence of brown adipocytes in rat white adipose tissue ... · fat pads of rat analyzed by Northern blotting experiments. A 20 µ g sample of total RNA extracted from different

Eppendorf Forensic brochure GB2...Forensic · Eppendorf Products 9 DNA needs to be extracted and purifi ed before it can go into analysis. This step is especially crucial — if DNA

Eppendorf Forensic brochure GB2...Forensic · Eppendorf Products 9 DNA needs to be extracted and purifi ed before it can go into analysis. This step is especially crucial — if DNA

1D-1 PCB ANALYSIS DATA SHEETConc. Extract Volume: Injection Volume: SDG No: Lab Sample ID: Lab File ID: Date Received: Date Extracted: Date Analyzed: Dilution Factor: CAS NO COMPOUND

1D-1 PCB ANALYSIS DATA SHEETConc. Extract Volume: Injection Volume: SDG No: Lab Sample ID: Lab File ID: Date Received: Date Extracted: Date Analyzed: Dilution Factor: CAS NO COMPOUND

Threat Central Update - Hewlett Packard · PDF filereal-time analyzed, correlate, and actionable threat intelligence to ArcSight ... Indicators are now extracted and sent to community

Threat Central Update - Hewlett Packard · PDF filereal-time analyzed, correlate, and actionable threat intelligence to ArcSight ... Indicators are now extracted and sent to community

Forensic medicine (forensic pathology)

Forensic medicine (forensic pathology)

EXTRACTION AND CHARACTERIZATION OF OIL FROM ......Oil from bottle gourd seeds were extracted and analyzed. Standard chemical methods by Association of official analytical chemists

EXTRACTION AND CHARACTERIZATION OF OIL FROM ......Oil from bottle gourd seeds were extracted and analyzed. Standard chemical methods by Association of official analytical chemists

AGILENT ASSAYMAP SOLUTION FOR PEPTIDE SAMPLE ......Samples were eluted, lyophilized, reconstituted and 5 μL (1.25 μg) were analyzed by LC/MS. Signals from 25 peptides were extracted,

AGILENT ASSAYMAP SOLUTION FOR PEPTIDE SAMPLE ......Samples were eluted, lyophilized, reconstituted and 5 μL (1.25 μg) were analyzed by LC/MS. Signals from 25 peptides were extracted,

Forensic Applications of Foraminifera · Forensic Applications of Foraminifera 1 Andrew M. Bowen Stoney Forensic, Inc.* KEYWORDS Forensic geology, forensic geoscience, forensic soil

Forensic Applications of Foraminifera · Forensic Applications of Foraminifera 1 Andrew M. Bowen Stoney Forensic, Inc.* KEYWORDS Forensic geology, forensic geoscience, forensic soil

Kätriin Kukk1302299/...Social media platforms such as Facebook and Twitter have enormous amounts of data that can be extracted and analyzed for various purposes. Stock market prediction

Kätriin Kukk1302299/...Social media platforms such as Facebook and Twitter have enormous amounts of data that can be extracted and analyzed for various purposes. Stock market prediction

Application of automated dried blood spot sampling and LC ... · After drying, storage and shipment, the DBS samples were extracted and analyzed by LC–MS/MS. ... laboratory animal

Application of automated dried blood spot sampling and LC ... · After drying, storage and shipment, the DBS samples were extracted and analyzed by LC–MS/MS. ... laboratory animal

Meter Revenue Refunds - St. Paul, MN, New Brighton Branch ... · from April 1 to September 30, 2018. We also extracted and analyzed Enterprise Data Warehouse (EDW)5 data for these

Meter Revenue Refunds - St. Paul, MN, New Brighton Branch ... · from April 1 to September 30, 2018. We also extracted and analyzed Enterprise Data Warehouse (EDW)5 data for these

Mac OS X Forensic Artifact Locations - Champlain College Forensics.… · Mac OS X Forensic Artifact Locations Page 6 of 36 Once our images were collected, we analyzed them with EnCase

Mac OS X Forensic Artifact Locations - Champlain College Forensics.… · Mac OS X Forensic Artifact Locations Page 6 of 36 Once our images were collected, we analyzed them with EnCase

Forensic Anthropology - FORENSIC SCIENCE

Forensic Anthropology - FORENSIC SCIENCE

Low Down and Dirty: Anti-forensic Rootkits Methods • Data Contraception – Prevent evidence data from existing somewhere that can be analyzed – E.g. Memory only malware, memory

Low Down and Dirty: Anti-forensic Rootkits Methods • Data Contraception – Prevent evidence data from existing somewhere that can be analyzed – E.g. Memory only malware, memory

Time-varying functional network information extracted from ...To test our hypothesis, we analyzed a 247-subject resting-state fMRI data set from a publicly accessible database known

Time-varying functional network information extracted from ...To test our hypothesis, we analyzed a 247-subject resting-state fMRI data set from a publicly accessible database known

Forensic Investigation in Communication Networks Using ...file.scirp.org/pdf/IJCNS20090900007_66531004.pdf · tems. A large amount of data should thus be analyzed ... vestigation

Forensic Investigation in Communication Networks Using ...file.scirp.org/pdf/IJCNS20090900007_66531004.pdf · tems. A large amount of data should thus be analyzed ... vestigation

Forensic analysis of cloud-native artifacts · in criminal cases. They reported that the analyzed services may create different artifacts depending on specific fea-tures of the services,

Forensic analysis of cloud-native artifacts · in criminal cases. They reported that the analyzed services may create different artifacts depending on specific fea-tures of the services,