Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

首页 新随笔 联系 订阅 管理

Naver LINE has a little-known feature called 'All Albums' represented by a seemingly inconspicuous icon in the top-right corner of the chat interface.

Clicking on it reveals all the photos in chatrooms. The tooltip in the top-right corner explains the feature's characteristics. It seems even photos from deleted or hidden chatrooms are still available.

Upon careful examination, it is indeed possible to trace back to photos from many years ago, even if they no longer exist in the phone's album, but can still be seen in LINE. For forensic examiners, this is nothing short of an important clue.

Why some Law Enforcement claim they have never found such evidence before? The reason is that Law Enforcement always seize suspects’ phones and switch them to airplane mode. Once offline and unable to access the internet, the little-known special feature is then difficult for Law Enforcement to discover.

 

posted on 2024-02-27 13:24  Pieces0310  阅读(114)  评论(0)    收藏  举报