← All EvidenceCrossChristopher Jon Beeson — Cross Christopher Jon Beeson Joshua Lewis Dratel
Digital Evidence
DD disk image of Mr. Ulbricht's laptop
Beeson testified that he used DD to image Ulbricht's running laptop. His simultaneous imaging and MD5 hashing attempt failed with a permission-denied error, so he repeated the command without simultaneous hashing and generated the hash on October 3. He explained that continued activity on the live file system meant a later image would not match.
About
The questioning examined whether live collection preserved the laptop's earlier state, without establishing that any identified incriminating file was fabricated, changed, or omitted.