GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital...

14
com GPS Forensics www.robsonforensic.com ROBSON FORENSIC EXPERT Matthew Peterson, CFCE DIGITAL FORENSICS

Transcript of GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital...

Page 1: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com www.robsonforensic.

com

GPS Forensics

www.robsonforensic.com

ROBSON FORENSIC EXPERT

Matthew Peterson, CFCE

DIGITAL FORENSICS

Page 2: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Summary

• Background

• What is GPS Forensics?

• Cases and Devices with Location Data

• Real Data, Real Issues, Real Pitfalls

• Discussion/Questions

**Videos and select information redacted for web-posting**

Page 3: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Background

US Coast Guard

• Maritime Navigation and Law Enforcement.

• Provided digital forensic support to over 12 other

.,Federal, State, and Local Agencies.

• Extracted/Analyzed Hundreds of GPS units.

Certified Forensic Computer Examiner (CFCE)

Cellebrite Certified Physical Analyst (CCPA)

Page 4: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

GPS Forensics – Legal Realm

Page 5: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Location Data Applicability

Nearly any type of case in which location, timing,

and activities are a factor.

• Distracted Driving

• Dram Shop

• Adult/Child Supervision

• Fire and Explosion

• Workplace Safety

• …

Page 6: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Devices with Location Data

• Cellular Phones / Smart Phones

• Laptops with GPS Feed (maritime)

• GPS Navigation Units

•Hiking • Bicycling • Maritime • Automotive

• Vehicle Infotainment / Telematics Systems

• Fitness Trackers

• Other Mobile Devices

Page 7: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Real Data, Real Issues

Page 8: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Smart Phones Filename 20160106_203538.jpg

Make samsungModel SPH-L720Software L720VPUGOK3

DateTime 2016:01:01 20:35:38DateTimeOriginal 2016:01:01 20:35:38

DateTimeDigitized 2016:01:01 20:35:38GPS information:GPSVersionID 2.2.0.0

GPSLatitudeRef NGPSLatitude 40 2 38.8392 (40.044122)

GPSLongitudeRef WGPSLongitude 76 18 27.1008 (76.307528)GPSTimeStamp 20 35 38

GPSDateStamp 2016:01:06SceneCaptureType Night scene

Select Metadata

Page 9: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Analysis & Presentation

Present as PDF, Excel, or Native Format?

Page 10: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 11: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 12: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Vehicle Infotainment Systems

Page 13: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

**Screenshot of animated sequence**

Page 14: GPS ForensicsUS Coast Guard. •Maritime Navigation and Law Enforcement. •Provided digital forensic support to over 12 other .,Federal, State, and Local Agencies. •Extracted/Analyzed

www.robsonforensic.com

Contact Information

Matthew Peterson, CFCE

Digital Forensics

206.262.7923

[email protected]

www.robsonforensic.com

http://www.robsonforensic.com/

Characteristics of homologous recombination …...HRD ANALYSIS All tumors were analyzed using the HRD assay, a next generation sequencing assay performed using DNA extracted from FFPE

Characteristics of homologous recombination …...HRD ANALYSIS All tumors were analyzed using the HRD assay, a next generation sequencing assay performed using DNA extracted from FFPE

EXTRACTION AND CHARACTERIZATION OF OIL FROM ......Oil from bottle gourd seeds were extracted and analyzed. Standard chemical methods by Association of official analytical chemists

EXTRACTION AND CHARACTERIZATION OF OIL FROM ......Oil from bottle gourd seeds were extracted and analyzed. Standard chemical methods by Association of official analytical chemists

Chemistry and ToxicitySamples for organics analysis were extracted using EPA Method 3540 and analyzed by 3 Gas Chromatography/Mass Spectrometry (GC/MS) by EPA Method 8270. Total organic

Chemistry and ToxicitySamples for organics analysis were extracted using EPA Method 3540 and analyzed by 3 Gas Chromatography/Mass Spectrometry (GC/MS) by EPA Method 8270. Total organic

EQ: How is soil analyzed in forensic science?

EQ: How is soil analyzed in forensic science?

113 Annual Conferencesoftware – XBRL is a standard XBRL data can be created, extracted, and analyzed by thousands of commercial and open source software applications on the market

113 Annual Conferencesoftware – XBRL is a standard XBRL data can be created, extracted, and analyzed by thousands of commercial and open source software applications on the market

Forensic Applications of Foraminifera · Forensic Applications of Foraminifera 1 Andrew M. Bowen Stoney Forensic, Inc.* KEYWORDS Forensic geology, forensic geoscience, forensic soil

Forensic Applications of Foraminifera · Forensic Applications of Foraminifera 1 Andrew M. Bowen Stoney Forensic, Inc.* KEYWORDS Forensic geology, forensic geoscience, forensic soil

Text Extracted

Text Extracted

Threat Central Update - Hewlett Packard · PDF filereal-time analyzed, correlate, and actionable threat intelligence to ArcSight ... Indicators are now extracted and sent to community

Threat Central Update - Hewlett Packard · PDF filereal-time analyzed, correlate, and actionable threat intelligence to ArcSight ... Indicators are now extracted and sent to community

FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ANALYSIS · FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ... FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ANALYSIS ... c. Fill both tip racks

FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ANALYSIS · FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ... FORENSIC BIOLOGY PROTOCOLS FOR FORENSIC STR ANALYSIS ... c. Fill both tip racks

UNIVERSIDADE FEDERAL DA PARAÍBA CENTRO DE … · extracted from SPSS and the interviews were analyzed through content analysis with the QDA Miner assistance.

UNIVERSIDADE FEDERAL DA PARAÍBA CENTRO DE … · extracted from SPSS and the interviews were analyzed through content analysis with the QDA Miner assistance.

Extracted Document

Extracted Document

Application of automated dried blood spot sampling and LC ... · After drying, storage and shipment, the DBS samples were extracted and analyzed by LC–MS/MS. ... laboratory animal

Application of automated dried blood spot sampling and LC ... · After drying, storage and shipment, the DBS samples were extracted and analyzed by LC–MS/MS. ... laboratory animal

Time-varying functional network information extracted from ...To test our hypothesis, we analyzed a 247-subject resting-state fMRI data set from a publicly accessible database known

Time-varying functional network information extracted from ...To test our hypothesis, we analyzed a 247-subject resting-state fMRI data set from a publicly accessible database known

Mac OS X Forensic Artifact Locations - Champlain College Forensics.… · Mac OS X Forensic Artifact Locations Page 6 of 36 Once our images were collected, we analyzed them with EnCase

Mac OS X Forensic Artifact Locations - Champlain College Forensics.… · Mac OS X Forensic Artifact Locations Page 6 of 36 Once our images were collected, we analyzed them with EnCase

Forensic Investigation in Communication Networks Using ...file.scirp.org/pdf/IJCNS20090900007_66531004.pdf · tems. A large amount of data should thus be analyzed ... vestigation

Forensic Investigation in Communication Networks Using ...file.scirp.org/pdf/IJCNS20090900007_66531004.pdf · tems. A large amount of data should thus be analyzed ... vestigation

Glycerin Enemas and Suppositories in Premature Infants: A ... · suppositories. Data were extracted in duplicate and meta-analyzed using a random effects model. RESULTS: We identified

Glycerin Enemas and Suppositories in Premature Infants: A ... · suppositories. Data were extracted in duplicate and meta-analyzed using a random effects model. RESULTS: We identified

Enhanced Forensic Speaker Verification Using A …Secondly, the MFCC features extracted from the DWT add more features to the features extracted from the MFCC of the noisy speech

Enhanced Forensic Speaker Verification Using A …Secondly, the MFCC features extracted from the DWT add more features to the features extracted from the MFCC of the noisy speech

1D-1 PCB ANALYSIS DATA SHEETConc. Extract Volume: Injection Volume: SDG No: Lab Sample ID: Lab File ID: Date Received: Date Extracted: Date Analyzed: Dilution Factor: CAS NO COMPOUND

1D-1 PCB ANALYSIS DATA SHEETConc. Extract Volume: Injection Volume: SDG No: Lab Sample ID: Lab File ID: Date Received: Date Extracted: Date Analyzed: Dilution Factor: CAS NO COMPOUND

MEMORANDUM - Lexington Public Schoolslps.lexingtonma.org/.../Centricity/Domain/547/ClarkeWipeSampleJuly2015.pdf · If a sample was re-analyzed or re-extracted due to a required quality

MEMORANDUM - Lexington Public Schoolslps.lexingtonma.org/.../Centricity/Domain/547/ClarkeWipeSampleJuly2015.pdf · If a sample was re-analyzed or re-extracted due to a required quality

Systematic review and meta-analysis of islet ...klx.njmu.edu.cn/_upload/article/files/13/f6/7218bb... · extracted by two reviewers independently. Data were analyzed using STATA 12.0

Systematic review and meta-analysis of islet ...klx.njmu.edu.cn/_upload/article/files/13/f6/7218bb... · extracted by two reviewers independently. Data were analyzed using STATA 12.0