Processos Vol XI

Pages 3023 –

Portimao Family Court

Report on the Analysis of the Contents of the Computer Hard Disk

Judge: Dr Pedro Daniel dos Anjos Frias

Assistant Clerk: Carlos Coelho

PJ specialists present: Alberto José Carvalho Baptista and Mria Joao Rodrigues B. Nunes Vicente

On 17th October 2007 at about 14.15 in the installations of this Family Court (office of the Instruction Judge on the fourth floor) the PJ specialists Alberto José Carvalho Baptista and Mria Joao Rodrigues B. Nunes Vicente arrived with the aim of analysing the contents of the hard disk of the laptop PC, make Sony, model Vaio with series number 28247*******, according to the terms of page 2689 date 24-09-2007.

The Criminal Instruction Judge of the Portimao Court, helped by the Assistant Clerk Carlos Coelho asked the PJ specialists identified above to proceed to analyse the contents of the hard disk mentioned above.

After the request was made to the PJ specialists, the instruction judge was given the description of the following methodology to be used in the analysis of the hard disk:

1. “Cloning” of the hard disk inserted in the laptop PC (described above) by means of carrying out a digital image of the disk using forensic hardware that blocks the writing of the disk, not allowing for any alteration of the hard disk;
2. Placing of the digital image files in a PJ computer back up.
3. Examination of the contents by “screening”.

After the methodology described above, the PJ specialists proceeded to do the following:

OPERATIONS

1. With the computer in question open, a hard disk of 25”, make Toshiba, model MK1234GSX with series number X6TMF99TS was extracted.
2. Initiation of the “cloning” operation of the hard disk.
3. Finalisation of the “cloning” operation at about 19.30.
4. Printing of the digital summary obtained by means of MD5 algorithm.


Afterwards the specialists proceeded to:

EXAMINATION OF THE CONTENTS
In the “screening” of the contents of the computer approximately 177.000 entries were found (files, pastes, etc).

The analysis of these entries was carried out in detail by the PJ specialists.

This report was revised by me, Carlos Coelho.

Signed.



Processos Vol XI
Page 3026

Report:

http://gerrymccannsblogs.co.uk/P11/11_V ... e_3026.jpg


Processos Vol XI
Page 3027

Portimao Court

Conclusion on 2007-10-18 per verbal instruction

The examination being completed, return the computer to the Public Ministry Services.

It is suggested that the necessary measures should be taken concerning the hard disk installed in the computer.

Portimao 2007-10-18

Signed

Processos Vol XII

Pages 3073 to 3076

Family and Minor Court of Portimao

201.707 GALGS

CONCLUSION 21-09-2007


Pages 2681 – 2682 seen

Deciding:

I
Of the diligences required by the Public Ministry I do not authorise the delivery in digital format (CD or DVD) of the contents of any message sent or received by SMS or MMS concerning the telephone numbers shown on pages 2681 and 2682 as this would signify gaining knowledge of the content of the conversation or telephone communication that has already taken place and without there having been a previously authorised legal dispatch.

There is therefore no legal support or required reason for this to be deferred.

II
Without prejudice to the above-mentioned decision and because this process investigates the practice of the crimes of abduction, homicide, exposure or abandonment and hiding of a body, the first three being punishable with a prison term superior to 3 years and in order to determine the real time of the disappearance of the child as well as to establish the location of the persons that were around her and their respective movements, as the conjugation of these elements could confirm or exclude their participation in the facts under investigation, having, in this way, extreme relevance for the discovery of the truth I order the coverage of the dispositions in articles 187 – 1, a)e4 a) and b), 189 – 2 of the CPP.

A. Its is requested from the three national telephone operators (TMN, VODAPHONE, and OPTIMUS that they only supply digital support (CD or DVD) of the complete listings of telephone traffic referring to the calls made and received during the period of time from 28th April to 9th September 2007, including the mobile phone location and trace back, as well as roaming calls and SMS and MMS (the latter without their respective content as specified above) of the following numbers:

- 00447786986188
- 00447903108397
- 00447748844837
- 00447796272586
- 00447790327653
- 00447713258795
- 00447808584191
- 00447771591456
- 00447771591461
- 00447818520047

B. It is requested that the mobile operators TMN supply digital support (CD or DVD) of the complete telephone traffic referring to the calls made and received during the period between 19.00 on 3rd May 2007 and 12.00 on 4th May 2007 including the mobile phone location and trace back, as well as roaming calls and SMS and MMS (the latter without their respective content as specified above) of the following numbers:

- 969787045
- 964098114
- 962093051

C. Its is requested that the operator PORTUGAL TELECOM supply digital support (CD or DVD) of the complete telephone traffic referring to the calls made and received during the period between 19.00 on 3rd May 2007 and 12.00 on 4th May 2007 of the following telephone numbers:

282771000
282762809

Notified.

III
As there could eventually be information stored that is relevant to the discovery of the truth in the laptop computer make Sony, model Vaio series number 2824795**+ used by one of the arguidos, I authorise the analysis of the contents of the hard disk to be carried out in my presence.

This will be included in the corresponding process file.

The Public Ministry is responsible for presenting the computer and the respective expert when I am present at the Court.

Notification.

Portimao 2007 – 09 –024
(21-9 Imp interrogation morning and afternoon, 22 and 23)

Signed

Docs linked into TOC.