I have been asked to find out if it is possible to get the identity of a specific computer used to burn a CD. A school has discovered that some one photographed exam papers with the correct answers then burnt the jpgs onto a CD.
There is nothing on the files/jpgs themselves. The cd was burnt on a MAC so there is a DS_STORE file on it but my PC can't read it. From what I could find online, there isn't much in it anyway, except the ordering of icons and basic property information.
Anyone have any suggestions as to how I could find the relevant information, if it exists?
Thanks for your help.
Forensics
Thu, 2010-06-10 15:49 by admin
My best guess is that it is possible to determine in which drive a CD or DVD was burnt. However, some caveats:
That said, it may in some cases be possible to find out more easily, if the person who burnt the CD made a mistake and left more obvious traces.
I can narrow down the number
Thu, 2010-06-10 16:25 by silkmaze
I can narrow down the number of computers that might have been used, they are all in the same place. How would I be able to extract more information from the CD? Is there a program I can buy?
No
Thu, 2010-06-10 20:15 by admin
There is no simple way.
Thank you.
Fri, 2010-06-11 00:59 by silkmaze
Thank you.