Opinion ID: 3047130
Heading Depth: 2
Heading Rank: 3

Heading: Forensic Examination of Woods’s Computers

Text: DCFL examiners found numerous images of child pornography and one video of child pornography on the home computer Woods turned over to Agents Eversman and Ozden. Hundreds of these images matched images of known child pornography catalogued in the database maintained by the National Center for Missing and Exploited Children (“NCMEC”). Agent Eversman selected several of the images that matched images in the NCMEC database for in-depth analysis. Through in-depth analysis, NCIS investigators attempt to determine images’ names3 and origins, when the images were saved to a computer, and whether the images were copied or transferred to another computer. DCFL performed an identical analysis on the H-P computer that Woods’s 3 Particular images of child pornography in wide circulation are often identified by name. For example, Woods was found in possession of a video known to be part of the “Vickie” series. 6 ex-wife turned over to NCIS. Forty-one of the images and one video discovered on the H-P computer matched images of known child pornography in the NCMEC database. From these matching images, an NCIS agent selected six images for indepth analysis. The in-depth analyses of the images retrieved from the two computers showed that the H-P user downloaded images of child pornography onto the H-P computer at various times and saved those images in obscure folders on the H-P computer. The H-P user then copied all of these images to Woods’s new home computer in June 2007 and attempted to delete the images from the H-P computer around or after December 2007. The filenames of at least some of the images recovered from the two computers included obvious references to the depiction of pre-pubescent victims.4