Re: Determining that someone is not the author of an offensive email

I AM NOT A LAWYER.

1) Rules of evidence may differ in Brazil somewhat, but since you didn't
take a forensically clean copy of the computer, but instead looked at
the computer via it's operating system, you have probably tainted the
evidence.  In the US, any good lawyer would be able to create reasonable
doubt and have the case thrown out.

2) did you look for evidence of logging into the hotmail account, and
not just evidence of the contents of the email?

3) Since they were using private IPs, (I'm assuming you meant
192.168.x.x) are they using a proxy server?  Or just a NAT router?
Probably just a hardware router, but you should at least ask. Perhaps
there are some logs of someone going to hotmail on that day?

4) Clock on a PC not connected to a domain is completely irrelevant.  It
can be set to any time of day or any day at any time.

Justin

Flavio Silva wrote:
> Hi all!
> 
> I am trying to help a defence lawier in this situation.
>