finding internet evidence

HMPro: Insert Title

Finding Internet Evidence

April 1, 2017

Dan Michaluk

HMPro: Insert Title

Tips for collection

• Clients (and assistants, if you must), not you• Capture all the relevant evidence• Capture periodically• Print, screen capture or screen recorder are fine• But use a file naming protocol and create an evidence

log

HMPro: Insert Title

Tools and techniques – WHOIS search

• About who controls an internet domain name

• May point to a local registrar who has a relationship with a person of interest

3

HMPro: Insert Title

Tools and techniques – The Wayback Machine

• Goto <archive.org>• Periodic, point-in-time

snapshots of many but not all websites

4

HMPro: Insert Title

Tools and techniques – Reverse image search

• Use it in addition to a name search to be more thorough

• Use it to see if someone is a real person

5

HMPro: Insert Title

Tools and techniques – Allmytweets

• Get a complete list of a person’s tweets

• May capture words better than using the twitter application

6

HMPro: Insert Title

Tools and techniques – Knowem

• Does your person of interest have a username?

• Search to see what platforms he or she might be using

7

HMPro: Insert Title

Tools and techniques – Social searcher

• Search across social media platforms

• Good intelligence tool• Consider use in crises

situations

8

HMPro: Insert Title

Ethics scenario

• You’re prepping for a wrongful and mitigation is an issue. The plaintiff claims she’s too depressed to search for work as a result of the discharge. You’re skepitcal but don’t have good evidence. Low an behold, Facebook is telling you that your cousin Betty is friends with the plaintiff. Betty is discreet and owes you one. Can you use Better to take a peek at the plaintiff’s Facebook?

9

HMPro: Insert Title

Ethics scenario

10

HMPro: Insert Title

Finding Internet Evidence

April 1, 2017

Dan Michaluk