Perhaps they had a ruling in the past that during accessing a computer, things got changed, like the logs. And so now they have to have that in the warrant so that they don't lose their case.
It sounds stupid, but I could see it happening.
It sounds stupid, but I could see it happening.
Afaik it is practice in rule-of-law countries to hand a clone to each party in the case.
The ABC staff literally copied all the stuff that might be interesting (found using keyword searches) into a folder, which the ABC legal and AFP investigators went through one by one to determine what was of interest to AFP. The items of interest was then copied to a “sealed” package which the AFP pinky swears nobody will look at for two weeks while the ABC seeks an injunction.
they don't have imaging tools and/or write blockers?