Cybersecurity
21.3 The Final Report
PR
O
Case Report
FD
National Gallery DC
Tracy’s iPhone [2012-07-15-National-Gallery]
O
C
2012-07-15-National-Gallery Digital Forensics Investigation Report
,Table of Contents
PR
Case Report
National Gallery DC
Tracy’s iPhone [2012-07-15-National-Gallery]
O
Table of Contents
Executive Summary
FD
Equipment and Tools
Details of Tracy’s iPhone
Evidence to Establish Personas
O
Evidence relating to theft of valuable stamps
C
Evidence relating to defacement of museum art
Plot Timeline
Conclusion
Appendix A: Correspondence Evidence
Appendix B: WiFi and GPS Location Information
2
, Executive Summary
On January 21, 2016, Digitech Inc. was called in to assist the National Gallery, Washington D.C.
(NGDC) case involving the conspiracy associated with the theft of valuable stamps and defacing
of museums are at the NGDC.
● Tracy is a suspect in the aforementioned conspiracy.
● As part of the investigation, Tracy’s iPhone was taken into custody.
● Digitech, Inc. was tasked with investigating evidence relevant to the aforementioned
conspiracy.
PR
As described fully in the report, Digitech, Inc. made the following findings.
Based on the evidence shown below, it appears that Tracy and her brother Pat
conspired with an unknown 3rd party with email address “King kthings
” to steal stamps from the National Gallery.
O
Equipment and Tools
FD
Digitech used the Autopsy open-source forensics tool on a Kali Linux host to analyze an
image of Tracy’s iphone. Other websites and tools were also used (e.g.
maps.google.com, etc.).
O
C
3
21.3 The Final Report
PR
O
Case Report
FD
National Gallery DC
Tracy’s iPhone [2012-07-15-National-Gallery]
O
C
2012-07-15-National-Gallery Digital Forensics Investigation Report
,Table of Contents
PR
Case Report
National Gallery DC
Tracy’s iPhone [2012-07-15-National-Gallery]
O
Table of Contents
Executive Summary
FD
Equipment and Tools
Details of Tracy’s iPhone
Evidence to Establish Personas
O
Evidence relating to theft of valuable stamps
C
Evidence relating to defacement of museum art
Plot Timeline
Conclusion
Appendix A: Correspondence Evidence
Appendix B: WiFi and GPS Location Information
2
, Executive Summary
On January 21, 2016, Digitech Inc. was called in to assist the National Gallery, Washington D.C.
(NGDC) case involving the conspiracy associated with the theft of valuable stamps and defacing
of museums are at the NGDC.
● Tracy is a suspect in the aforementioned conspiracy.
● As part of the investigation, Tracy’s iPhone was taken into custody.
● Digitech, Inc. was tasked with investigating evidence relevant to the aforementioned
conspiracy.
PR
As described fully in the report, Digitech, Inc. made the following findings.
Based on the evidence shown below, it appears that Tracy and her brother Pat
conspired with an unknown 3rd party with email address “King kthings
” to steal stamps from the National Gallery.
O
Equipment and Tools
FD
Digitech used the Autopsy open-source forensics tool on a Kali Linux host to analyze an
image of Tracy’s iphone. Other websites and tools were also used (e.g.
maps.google.com, etc.).
O
C
3
