Home > Digital Evidence in Criminal Behaviour Order Breach

Digital Evidence in Criminal Behaviour Order Breach

Introduction

In a case involving a breach of a Criminal Behaviour Order (CBO), IntaForensics was instructed to review the digital evidence relating to a website containing derogatory and insulting content about police and public services. The defendant claimed to have lost access to the site, denying responsibility for its continued publication. Our forensic analysis of the site and its hosting activity helped establish clear evidence of ongoing control and direct involvement by the defendant. 

Background

The defendant in this case had created and published a personal website that included offensive and inflammatory content directed at law enforcement, the judicial system, and social services. Following a court ruling, the defendant was ordered to remove the offending material. The site, however, remained online in defiance of that order. 

The defendant later claimed that he no longer had access to the website or the ability to remove or modify its content. This prompted a digital forensic investigation to determine who controlled the site, when it had last been updated, and whether the defendant’s claims could be substantiated. 

The Challenge

The key issue was attribution — whether the defendant had retained the ability to access, manage, and update the website after the court order had been made. The prosecution needed to determine if updates had taken place following the order and whether the defendant had knowingly continued to publish prohibited material. 

The defendant claimed to have lost the login credentials and therefore had no ability to comply with the order. Our task was to assess whether this was credible, and to establish a clear timeline of publishing activity, software usage, and domain control. 

The Solution

IntaForensics conducted a full digital review and historical analysis of the website in question. Our work involved the following key steps:

Review of web publishing software
We analysed the method used to build and publish the site, identifying the use of Adobe Dreamweaver as the primary development tool. Our familiarity with this software allowed us to explain the typical publishing process and what level of control the user would require.

Analysis of page update timestamps
By reviewing embedded JavaScript and HTML file attributes, we identified the last modification dates of key site files. These dates showed edits had been made after the court order was issued.

Retrieval of historical site versions
We accessed archived versions of the website from web capture services, enabling comparison between the site’s content before and after the court order. The differences confirmed that the website had been altered in defiance of the order.

Attribution through domain registration records
We examined WHOIS and domain renewal data, which confirmed that the defendant had registered the domain name and had continued to renew the subscription post-order, maintaining control of the site’s presence online.

Expert witness reporting
Our findings were presented in a detailed expert witness report. The report explained the processes involved in building and maintaining a website and provided a clear forensic account of activity surrounding the site.

Our analysis showed that website updates occurred after the court’s order, and that the defendant retained effective control of the site infrastructure.

Our Findings

The forensic timeline and web artefact analysis demonstrated that the website had been actively maintained and modified after the court ordered its removal. The technical evidence contradicted the defendant’s claim of lost access. Additionally, registration and subscription records supported attribution of the domain to the defendant during the relevant period. 

This case illustrates how digital forensic analysis can expose the truth behind claims of inaccessibility or technical failure. Website publishing is traceable, and with the right tools and expertise, control and authorship can be clearly attributed. 

Contact IntaForensics

Contact IntaForensics to discover how our digital investigation services can support your case with integrity, accuracy, and expert insight. Get in touch at sales@intaforensics.com or call us on: 0247 77 17780.

Related Posts

Snapchat Functionality Analysis in Criminal Investigation

Snapchat Functionality Analysis in Criminal Investigation

In a criminal case involving two co-defendants, IntaForensics was instructed to provide expert evidence on the operation of the Snapchat platform. The central issue concerned a disputed communication involving a photograph with a caption, that had been shared between...

read more
IntaForensics Ltd
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.