Since when do you take a suspect's laptop and just start it up, and let it log into your network if you are a police detective?
Such lazy writing, and lack of research on how to do forensics on a suspect's computer.
Proper forensics is to take the storage, either hard-drive or SSD drive and put it in a dock attached to whatever computer you use to examine the drive. The suspect's drive never boots, never runs any programs, certainly not any viruses or RAT's. The biggest challenge you may have is that nowadays whole-disk encryption is easily available, so no files to read.
Even if for some reason you were forced to use the suspect's laptop, the first thing you do before you turn it on is to cover the camera with something opaque.
A pity, since the rest of the story was interesting, trying to sort out the who-dunit, and why. And, of course, to be continued...
Such lazy writing, and lack of research on how to do forensics on a suspect's computer.
Proper forensics is to take the storage, either hard-drive or SSD drive and put it in a dock attached to whatever computer you use to examine the drive. The suspect's drive never boots, never runs any programs, certainly not any viruses or RAT's. The biggest challenge you may have is that nowadays whole-disk encryption is easily available, so no files to read.
Even if for some reason you were forced to use the suspect's laptop, the first thing you do before you turn it on is to cover the camera with something opaque.
A pity, since the rest of the story was interesting, trying to sort out the who-dunit, and why. And, of course, to be continued...
