Forensic Audit in Maricopa County, AZ

Discussion in 'West Mall' started by AC, Apr 25, 2021.

  1. Garmel

    Garmel 5,000+ Posts

    Last edited: May 18, 2021
  2. Garmel

    Garmel 5,000+ Posts

    Btw, there are disinformation articles out there like from CNN that the audit team admitted to being wrong. Didn't happen so don't fall for it.
     
    • Agree Agree x 1
  3. Seattle Husker

    Seattle Husker 10,000+ Posts

    What's the spin from the conservative blogosphere? Fann and CyFir merely said the files they publicly accused Maricopa County of deleting were "found". In the Fann meeting yesterday they didn't elaborate on the about face from what even people here agreed would have been a criminal act.

    I'm biased but it doesn't take any liberal source to show that the initial accusation was reckless at a minimum and potential evidence of incompetence. Of course, even amateurs need their first audit experience, right?
     
  4. AC

    AC 2,500+ Posts



    Everything will come out. Right now we don’t have all the facts. Deleted files were recovered. Who deleted the files?
     
    • Hot Hot x 1
  5. Garmel

    Garmel 5,000+ Posts

    Yes, Codemonkey is right. That's not even close to what was said there. The deleted files were not obsolete files either like what the Board said. Once again America is being gaslighted just like during the Russian Collusion saga.
     
    • Agree Agree x 2
  6. Seattle Husker

    Seattle Husker 10,000+ Posts

    So that's the angle for the right-wing blogs. CyFIR claiming they found the files is yet another indication of something nefarious even though that wasn't stated in the meeting?

    Facts:
    1. 5/14 Karen Fann's letter claimed the files were "deleted" and accused the Maricopa County Board of "spoliation of evidence".
    2. 5/17 Maricopa County Board responded claiming the files are there and offered potential reasons for why CyFIR couldn't find the files on their copy of the servers and potential solutions to finding the files. Keep in mind, CyFIR completed the copy from the original servers, not Maricopa County.
    3. 5/18 CyFIR says they've now found the missing files yet offered no explanation how they found them or why they were claimed to be missing.

    Everything outside of that is subjective supposition.
     
  7. Garmel

    Garmel 5,000+ Posts

  8. Facing Addiction

    Facing Addiction 1,000+ Posts

    Every time I open this thread I picture this scene:
    Skip past the ad.......
     
    • Funny Funny x 2
  9. OUBubba

    OUBubba 5,000+ Posts

  10. Garmel

    Garmel 5,000+ Posts

    It looks like to me with the evidence that I pointed to earlier the team found the deleted files and recovered them before they were pointed to by the Board.
     
    • Like Like x 1
  11. AC

    AC 2,500+ Posts

    Yes. Now it will soon be time for Justice!
     
  12. OUBubba

    OUBubba 5,000+ Posts

    Stephen Miller is slipping up. He missed the obvious irony in his message. "Lake said, 'I think he was an accident, and this is what happens when accidents happen in politics. They become one and done.'"
     
    • Winner Winner x 1
  13. Seattle Husker

    Seattle Husker 10,000+ Posts

    That's the point. At no point did the CyFIR gentleman lay out how they found the files.

    Absent that detail both sides will fill in the gaps. I feel CyFIR is incompetent and is now trying to save face, their supporters will jump to "see, these files were deleted and CyFIR's expert skills allowed them to retrieve the deleted data".

    I'll simply say that the gentleman presenting did not given me confidence he's part of an A-Team of technology experts. As an IT leader with 20+ years of experience I'd likely downgrade them in any RFP process based purely on that 1:45 minute clip.
     
  14. CTex

    CTex 100+ Posts

    Hey Husker, I have no idea your particular areas of expertise in IT but I am sure it is extensive in 20+ years. But forensic examination does not necessarily come up frequently even for the CIO. His comments are commonplace for forensics. When a forensic examiner says that he "recovered" deleted files he is referring to the process of looking into unallocated space on the drive, finding the files there, and restoring them. (There are specific tools for this such as Encase, FTK etc..) When the files are deleted they don't leave the drive until they are completely overwritten. They are just "reassigned" as data clusters in unallocated space as opposed to being files in the files system. If a forensic examiner can access the drive before the files are overwritten they can be restored to the file system. (They will be overwritten if the drive completely fills up and there is no room for unallocated space.) So he did explain clearly, in the lingo of his trade, what was done.
     
    • Like Like x 3
  15. Seattle Husker

    Seattle Husker 10,000+ Posts

    One of my stops along the way I've worked directly with and supporting the CISO (Corporate Info Security) and Legal teams (Big 3-4 Wireless Telecoms) ensuring they have the right tools and those tools are supported by Enterprise IT. I'm not saying what he said is incorrect but he didn't give any of that detail in his response which is what I would have expected. Maybe he gave it outside of the clip?
     
  16. AC

    AC 2,500+ Posts

    upload_2021-5-19_21-29-8.png
     
    • Like Like x 1
  17. AC

    AC 2,500+ Posts

    upload_2021-5-19_21-30-15.png
     
    • Like Like x 1
  18. Garmel

    Garmel 5,000+ Posts

    The Maricopa Board and the media are deliberately lying to the American people.
     
  19. AC

    AC 2,500+ Posts

    So theoretically, we are about to find out soon. What’s on those data bases! Maybe it takes 4 weeks. I hope not, but nothing surprises me anymore.
     
  20. Mr. Deez

    Mr. Deez Beer Prophet

    Write it down. They're going to release the Kraken in 4 weeks!
     
    • Like Like x 1
    • Hot Hot x 1
  21. bystander

    bystander 10,000+ Posts

    So lots of talk on this thread. Did the folks in charge of the election and the databases say they did not delete the files?
     
  22. OUBubba

    OUBubba 5,000+ Posts

    Deleting files and moving files from one place to another (which I do frequently) are not the same thing. And, when I've moved files from Site A to Site B, a data security company could both find the "deleted data" at Site A and also find the actual stored data at Site B.

    It's ludicrous to not trust the newly elected GOP people involved.
     
  23. bystander

    bystander 10,000+ Posts

    I understand moving from one place to another and deleting. Did they say they didn't delete anything and did the forensic team in fact recover deleted file?
     
  24. Garmel

    Garmel 5,000+ Posts

    That's exactly what happened.
     
    • Like Like x 1
  25. OUBubba

    OUBubba 5,000+ Posts

    I don't purport to know all of the facts.
     
  26. Garmel

    Garmel 5,000+ Posts

    To further reiterate the media and the Maricopa are saying that the audit team admits they made a mistake in saying they recovered the deleted files which isn't true.
     
  27. Garmel

    Garmel 5,000+ Posts

    The audit team went to the Arizona Senate hearing to testify under threat of perjury while the Board would not attend the mandatory hearing and do the same. That says a lot.
     
    • Like Like x 3
    • Winner Winner x 1
  28. OUBubba

    OUBubba 5,000+ Posts

  29. CTex

    CTex 100+ Posts

    I wish he would have added a level of detail as well. Perhaps that was given off camera or perhaps it is forthcoming. More than anything I want to know what is in the deleted/recovered files.
     
  30. Garmel

    Garmel 5,000+ Posts

    One of them is supposedly the Tallying and Reporting file. Not sure what all of that does or not.
     

Share This Page