Is anyone else slightly horrified by the part where “due to the forensic detective being off work” the non-forensic detective “plugged the hard drive(an optiplex 3070 apparently misidentified as a hard drive) into a TV to look at the history” and just started poking at a computer seized as evidence live, network connected, no write blocking, just taking pictures of the TV?
Luckily for our intrepid investigator it would appear that the suspect did no track covering whatsoever; but that’s a chillingly low tier exercise in digital forensics.
