Digital Forensics
Background
Evelyn Lane, Bank Manager at Pure Gold Credit Union (PGCU) discovered a $100,000 cash discrepancy during a bi-annual audit. Staff interviews revealed rumors of an anonymous figure, “X,” seeking revenge against PGCU. The largest missing cash deposits coincided with shifts led by Peter Barnes, the bank’s lead teller.
Following internal recommendations, Peter was suspended, and all employee-issued mobile devices were confiscated for forensic analysis. Evelyn also suspects Rosie Lloyd, a colleague frequently seen with Peter.
CK Security Solutions has been hired to conduct a digital forensic investigation, analyzing iPhone images from Peter Barnes and Rosie Lloyd to determine their involvement in the financial losses at PGCU.
Tools & Methodology
To conduct the forensic investigation, I used the following tools:
- Kali Linux Forensics VM – Primary environment for analysis
- Autopsy 4.10.0 – Used for digital forensic examination
- SQLite Browser – Used to analyze database files from the iPhone images
To ensure the integrity of the evidence, I generated MD5 and SHA-256 hashes for both iPhone images before analysis. This step verifies that the data remains unaltered throughout the investigation.
Forensic Investigation
The full forensic analysis, including evidence review and findings, is available in the PDF report linked below: