[Explanation] In the scenario settings of high-tech crimes in film and television works, it is often that suspects use computers or mobile phones to commit crimes, and then the evidence is completely deleted or destroyed.
In reality, can such deleted or destroyed evidence be restored?
Recently, in the Electronic Evidence Laboratory of the People's Procuratorate of Gansu Province, Zhou Jing, a forensic expert, took photos of the mobile phone involved in the case. With the aid of equipment, he recovered the deleted information and searched for key information.
[Concurrent] Zhou Jing, Forensic Expert of the Electronic Evidence Laboratory of the People's Procuratorate of Gansu Province
Electronic evidence is not only data extraction and recovery, but also data analysis. This process needs to be completed by humans and machines.
[Explanation] The popularization of electronic products has changed the way people live and work, as well as the traditional forms of crime.
In 2010, the People's Procuratorate of Gansu Province set up an electronic evidence laboratory to extract and restore electronic data to provide assistance in finding clues and fixing evidence.
Zhou Jing said frankly that, compared with traditional evidence, electronic evidence has a virtual spatial nature. It is an intangible space that cannot be directly accessed by case investigators. They are like data "scouts", deciphering the space, extracting relevant evidence, and clarifying the direction of the case. .
[Concurrent] Zhou Jing, Forensic Expert of the Electronic Evidence Laboratory of the People's Procuratorate of Gansu Province
We must not only make it, but also provide investigators and case-handling personnel with more ideas.
So we said, if we can do as much as we can, we will do as much as possible, and we can find more information. (Investigators) they have some ideas that are also very good.
[Explanation] Zhou Jing said frankly that different models of mobile phones have different ways of recovering data, and appraisers need to disassemble a large number of used mobile phones for practice.
Over time, appraisers have a set of effective data recovery methods, even if the phone is flooded, burned, or almost broken to pieces, it is possible to recover.
And behind all this, there are unspeakable ups and downs.
[Concurrent] Zhou Jing, Forensic Expert of the Electronic Evidence Laboratory of the People's Procuratorate of Gansu Province
(There is a case) There are 3 appraisers working at the same time in our laboratory. It took 3 days to find a few voice messages in more than 500,000 pieces of data, and the most difficult thing is that we can’t understand (dialect). , Ask someone who understands to translate and provide (direction) to the scout.
(At that time) For our forensic appraisers, the last thing I want to face is the mobile phone.
[Explanation] Zhang Heng, director of the Procuratorial Technology Information Division of the People's Procuratorate of Gansu Province, said that in the information age, on the basis of forensic medicine, document inspection, and trace identification, electronic evidence is becoming more and more important in case investigation and handling.
[Concurrent] Zhang Heng, Director of the Procuratorial Technology Information Division of the People's Procuratorate of Gansu Province
Forensic appraisal of electronic evidence has already played a role in the handling of criminal cases. It cannot be judged simply as useful or not. It is very critical.
[Explanation] Zhang Heng said that he will give full play to the technical advantages and laboratory certification advantages to play a better role in combating cybercrime, clarify the investigation direction for the case, and build a strong line of defense for electronic evidence.
Ai Qinglong, Cui Lin reports from Lanzhou, Gansu
Editor in charge: [Tian Boqun]