This analysis brilliantly illustrates how the absence of digital evidence can be just as incriminating as its presence. It effectively turns a suspect's calculated silence into a loud, forensic admission of guilt.
Deep Dive
Voraussetzung
- Keine Daten verfügbar.
Nächste Schritte
- Keine Daten verfügbar.
Deep Dive
Idaho4 | Barnhart’s, FBI Tanzola & Jenkins Chair of Threat Assessment Team at WSU!Hinzugefügt:
What is up everybody? Welcome back to the transparency. Idaho for the Barnhard FBI Tanzola and we got to talk about Jennings being the chair of the threat assessment team. This is going to be a quick one. Uh 30 minutes. We're on the clock. Here we go. Just dropped. I don't know if you guys know this. I didn't even know this. There is something like the ESBs but for uh basically justice workers and it's called the justies.
The justies I think justices or something like that. Here, take a look.
I'm going to put it on 1 point five speed.
>> Good evening. We are continuing to track breaking news out of Moscow, Idaho. The bodies of four University of Idaho students discovered in a house just steps away from campus.
>> This is stuff that shouldn't happen, especially in a small, quiet town like Moscow is.
>> We'll find justice for you.
>> She was my baby sister, but she was so much wiser. One of the most incredible people you'll ever know.
>> She was really funny. Her jokes really would come out of nowhere.
>> Yeah. You don't heal from something like this, it's never going to happen. You're never going to be healed. All these kids are going to make your community better.
These murders have shaken our community and no arrest will ever bring back these young students.
>> 48 days after the gruesome murders of four University of Idaho students.
>> We have an individual in custody.
>> He was a loner. No friends. No one really except for his parents. He called them mother and father even through text message.
>> He didn't take a selfie to send it to someone else. It was very vain. It was very much just him recording himself for that purpose only. In the affidavit, police say they tracked the criminal justice PhD student through his cell phone and it pinged off towers near the crime scene at least 12 times before the attack.
>> He powered off his phone. It was at 100% battery.
>> To me, that that was preparation. That was him doing an action that he thought would help him get away with it.
>> We work with a really smart person, Josh Hecman, who is an Android expert, and we would reach out to Josh and say, "Do you know what this log is? What does this mean?" So, without any doubt, we could say, "This is the action we did, and this is what it looks like." That way we could easily explain it to a jury like if you push this button, this is what the file looks like. If you turn off Wi-Fi, this is what the file looks like.
>> Celebrate has an amazing group of people and we're a couple of them that that can dig into details like this, but the people that we work with are so excellent where it's like, hey, has any does anyone have a phone that has this file? Can you check it out? Like just literally validating and verifying so that we can show up and be confident.
Please welcome to the stage supervisory special agent from the FBI's Philadelphia field office, Jeff Tanzola, Celebrite's own senior digital forensics expert, Heather Barnhart, and Celebright's head of global engagement and community, Jared Barnhard, and moderating today's panel, Andrea Cavalier, senior reporter at the Independent.
>> Andrea Calvary did a lot of work with the Idaho for case. This was, I believe, April 14th, I want to say. And like I said, there was this red carpet. I didn't even know that it existed. that had started last year in 2025. Jesse Weber from Law and Crime was basically like the um I think he was the host of it and they gave away awards for like the best this, the best that, you know, and so they did a segment here and it was all dedicated to the University of um of Idaho uh student murders.
Thank you for being here today. My name is Andrea Cavalier. I'm senior reporter at the Independent and I have been covering this case since the beginning and all the way through the plea deal and the sentencing. Um, I interviewed Heather and Jared. Um, it was one of the first interviews that would continue to many others. Um, before we begin, um, I just want to take a moment and honor the four people on the screen. Madison Mogan, Kaylee Gonzalez, Zana Kernodal, and Ethan Chapen.
All right, so let's get the audience to know everyone.
This Jeff, you're in the Philly office.
Why don't you go ahead and introduce yourself?
>> Sure. I'm Jeff Tanzola. I'm a supervisory special agent with the FBI.
I am currently the lab director for the Philadelphia Regional Computer Forensic Laboratory and I'm also a senior digital forensic examiner for the FBI.
>> All right. and Heather and Jared, we already know.
>> Yeah.
>> Okay. So, I guess um Jeff, you you're in the Philly field office and so why don't you go ahead and I guess tell everyone how you got involved with this Idaho case that's across the country.
>> Correct. So, um the subject was located in our area of operations which is in the Poconos, Pennsylvania. He was home for I'm gonna say winter.
>> Okay. So Jeff is out of the Philadelphia branch and um he actually had now we want to pay attention to how he says all of this because um they mention during this that the big the big issue with everything that was going on was there was this the communication sucked.
You're going to hear them say this on the stage. The communication sucked. And then the next thing was is that there was a lot of chain of custody issues.
chain of custody issues.
Okay.
>> Break from from college. Um he was identified as one of the subjects in this case or the subject in this case um based on some other forensic evidence that >> here he said one of the subjects in this case. What's up Jeff? What do we got?
>> That was out there and ultimately was decided to affect a search warrant at his family residence and uh to affect the arrest of um the subject as well. So the FBI got involved because it obviously they have jurisdiction in the United States and the Moscow police and the Idaho State Police reached out for assistance. They also reached out for the assistance of the Pennsylvania State Police. So we worked very closely with Pennsylvania State Police and you know ironically I wasn't called into this case initially for digital forensics.
I'm sure some of you in the room uh sometimes digital forensics you know we're one of the big keystones for evidence but maybe we're also forgotten.
So actually I was called in for the tactical operation. uh we weren't sure who was going to affect the arrest.
Pennsylvania State Police ended up uh affecting the arrest and the FBI ended up collecting the evidence. So the evidence response team >> question is is why?
So he just makes it known that they didn't know who was going to do what.
Okay? And it's like okay well who made that decision? You guys, there's obviously reasons why you decided to do X, Y, and Z and the FBI wouldn't be making an arrest because why would they or rather say why didn't they?
>> And then I was out there collecting the digital evidence. So, ironically, I wasn't really notified initially and remember it was like 48 days uh after the event before we were able to get out there and make the arrest. So, a lot of time had lapsed in there.
All right. And Heather, why don't you tell us how you were brought into this and how you got involved?
>> Got my part, didn't I? I forgot my part a little bit. Sorry. So, um, so once we got to digital evidence, um, it wasn't a case where we were asked to take the initial look at the evidence and you know, a lot of times you get a phone, you get a computer, and there's a lot of evidence that just jumps off the screen at you. This was not the case with that.
Um, for those that have been following it, it was the complete opposite of that. So, we've been working on it and you know when you get a phone, you get a computer, you might have one of your partners take a look at the digital evidence. So, the digital evidence, I may have been missing something, right?
So, I get another examiner to take a look at it.
>> Okay, so now this is where it's this is where what he is testifying to. Are they testifying? What he is saying right now blows my mind away based off of what Detective Mauy claimed. Detective Mauy said that nobody looked at this device.
Nobody looked at anything to do with anything to do with Brian's anything.
Okay. Detective Maui said that nobody looked at anything and that it was sent to him and that he received that.
Now, unless I'm having amnesia or short-term memory loss, please tell me where you can find the opposite.
Okay.
I already put out about Dylan walking around. That's my big live tonight.
Dylan walking around is something completely different than what we're talking about. I break things up into um categories. The title of this live is the Barnharts, FBI, Tanzola, and Jennings's chair of uh he is the chair of the threat assessment team at WSU.
Okay.
Um am I going to be covering the book? Yes.
Okay. I I actually don't use clickbait titles. So, when my live says what it's about, it's pretty accurate.
I do that because I believe that you guys shouldn't be [ __ ] with. Okay. Um, if I wanted a ton of people here, I would definitely change my live titles.
I can promise you that.
Um, you're not going to hear people say Atlanta does clickbait titles ever.
So, if I say what I'm talking about in my live, like it's it's in my live title.
Um, so again, Maui said that nobody got into this phone, but it was shipped to them.
He testified to that. Now, we'll go pull it up. All right. Well, Jeff Tanzola is telling us something completely different.
And that's what and Aunt Taylor knew this.
And they got into his phone without a search warrant.
That's what that's the holy [ __ ] moment.
Um so >> they come and take a look and you know we're still not finding anything.
Ironically, you know this was tool agnostic. We used all the tools that we had available to us. Um, and we were still coming up with, you know, not a lot of evidence that really supported much. Um, we have a good partnership with Celebrate and we actually had Celebrate executives at the RCFL and we were just talking about, you know, advancements in digital forensics. What do we need? What can you provide? And they mentioned that, you know, if there's a big case you have, we might be able to help you with parts of that. Um, and ironically, I took up them on that.
Um, but it's not my case, right? It's not my case. It's a Moscow, Idaho case.
It's a it's an Idaho state police case.
It's the county prosecutor's case. So, I made the pitch to them. Um, hey, I think uh we have some experts out there that can get involved in that. And that's really how the ball started rolling. And I'll let those guys explain a little more about the non-disclosure agreements and all the stuff that >> Okay. So, I wanted to know that. I wanted to know how it truly developed that like who got involved, when they got involved, why were they sought out to get involved because this has a lot to do with what you guys want to talk about. Trust me, I put it already out this morning. Dylan Mortonson took two flights of stairs. So either she went from the top from the bottom level up to the middle floor, okay, back down, then back up to the middle floor and then back down, okay, before 11. or she went from the bottom level floor, she went to the middle level ground and then up to the third floor and then all the way down.
That's that's what we're dealing with here with with Dylan's movements um at 11:00 a.m.
So, the phone, if you're going to live and die by the phones in this case and live and die by Brian Colberger's phone, right, then you have to do the same thing with Dylan Mortonson's phone. And she said that she never went upstairs.
They never went upstairs. Well, that's a lie.
That's a bold-faced lie.
And I told you once we got that information, I have no problem talking about it. No problem calling a spade a spade. And that's what it is. And I think that if anything, she owes the parents an explanation as to why she lied.
>> Hoops you had to jump through to take this case.
>> So Jeff called me March of 2023.
>> March of 2023. Jeff calls March of 2023.
It's pretty soon. It's pretty. Again, everything was popping off in this month of March because they had nothing going into a preliminary hearing, which again, Ant Taylor, I bet you she wishes she had that back and why she's saying they have a preliminary hearing in June. But then again, maybe she's like, "No, it still was the right call." But and said, "Hey, I have this big case. You may have heard of it. Do you want to come in? You're going to have to sign." You should have said, "Sign your life away. You're gonna have to sign everything. You can't talk about it. You can't do anything." I said, "Sure, yeah, I'll come in." And I called Jared and said, "Guess where I'm going?" And he's like, "Do you want me to go too?" And so I called Jeff and I was like, "Do you want two of us for the price of zero? What do you think?"
>> And we took them.
>> Yeah. So two for the price of zero. But we've had a long relationship, like over a decade. Yeah.
>> From digital forensics, instruction.
>> So the partnership's been there. And then to compound the the complexity of it, uh we're very protective of our data. So we became friends. They came out to the lab. It's not like we gave them the images or the extractions and were like, "Hey, go do your magic." Um, so they spent a good amount of time at the RCFL in great conditions, I might add.
>> It's a very comfortable room. Um, very lavish detail. No, it was it was like a desk and a computer and sometimes two keyboards. Uh, >> sometimes.
>> So, this is what they're claiming.
They're claiming that they never received the material. if they wanted to work on this case, they had to go to a a computer like room that was located wherever the heck they're talking about.
Okay? And that's where they could work on the case that they could not they did not work on this case outside of like this room.
When I listen to this, this is how I interpreted it. So, if this isn't what they meant, then they might need to clear this up because how I interpret it was that if you want to work on this case, um you need to obviously come in, you're going to sign whatever these NDAs and [ __ ] um and this gag order, protective order, and then we're not able to give you the [ __ ] You need to come in and you're going to work on it where like where they're talking about in this in this room with a couple keyboards. They couldn't even have their they had no internet access. listen to the [ __ ] >> one.
>> But no, I was think it was great.
>> Okay. Well, so this case um I'd have to say really shows, you know, the power of combining the physical evidence, but also this digital evidence. And so, you know, you have the we have the knife the knife chief that was left behind at the crime scene. There's DNA on it and that's what's going that's what led police to the killer. But yet, there was you know, all your work that you did and that you you know did for so long. you know, this is what built that solid case that really supported the DNA findings.
Can you talk a little bit about that?
>> Yeah, for for me, I touched on a little bit. It was the lack of of evidence that I was able to find on the phone. Um, you know, we processed it, we parsed it out, we were looking at it, and again, a lot of time had passed. 48 days had passed.
Um, and but you'd still think you'd be able to find remnants on that phone or his computer. Um, but that really wasn't there.
>> Hey, did you hear how he just talked about this being 48 days? You know what that reminded me of? That reminded me of the what was it like the Star magazine?
Whatever the magazine, the tabloid magazine that talked about how many days had passed and an arrest was coming and this all came out before the arrest. You guys remember that? Yeah. Him mentioning 48 days.
>> Nothing was really jumping off the screen. Um and also on top of that just because of um his education he was in a doctorate program uh for for criminal justice uh in victimology. So he had stuff on his phone that could be kind of devious I guess I would say. Um but also could be easily explainable as research for his his doctoral program.
>> Exactly. Easily explainable.
That's why all that stuff that was just like meh you're that's going to not hit.
>> So it was a little difficult in that standpoint. And that's really that was the challenge that I had. They had different challenges and I'll let them explain the challenges that they ran into. Um but it was really that that initial analysis of it that everyone's looking at you. You know, you have a big case out there. Everyone's looking at you. You're the digital forensic guy.
You have the phone. You're looking at it. Why is nothing there?
>> So for me, I think the biggest challenge was lack of communication in the investigation. And >> right there, she just comes out and says it.
I respect her for saying this. This is huge. This is huge.
Okay, she's being brutally honest here and anybody that wants to say like boo to this woman, I think that you're making a huge mistake. Um, my biggest thing was the lack of communication. Absolutely.
Who's running? Like, what's going on?
I've never like what's going on? And nobody wanted to say anything to anybody because you guys, it's hard to be a leader when you don't know what you're doing. Okay.
facts >> digital forensic guy. You have the phone, you're looking at it. Why is nothing there?
>> So for me, I think the biggest challenge was lack of communication in the investigation. And also this wasn't our day job. We did this in the evenings on the weekends around our four kids sports um moving. So it was a lot of chaos when we could get into the RCFL and we would try to schedule in advance. But we would join investigative calls on occasion and sometimes they would forget to invite us. And then we'd be on a call and think, "Oh, had I known that, I would have looked at this.
Had I known that, I would have looked at this." But they weren't telling you certain things on purpose.
Because they were afraid of what there would be in terms of we cannot have them find anything that's exculpatory. I'm I'm being honest, okay?
And you shouldn't be worried about that if you have the right person. It's whatever you find, you find.
Right person, wrong person doesn't matter. You you don't shy away from telling people something because of you don't want to open up that door.
>> So that was the biggest challenge I would think for me.
>> Yeah. I mean I think there was a lot um there's a lot of >> any of you out there that you know are in law enforcement. It takes one jurisdiction juris jurisdiction beside you to cause communication issues. This was a whole country, right? And so we were again loosely connected to it through this partnership. Even Jeff sitting on this side of the country and someone else on the other and then local police department out there, state police department out there, prosecutor's office, whole other other thing. Uh and and I I think the public sphere of this also became very challenging because this, you know, got pitched out there. There was some tumultuous activity. The judge made a ruling that said gag order. No one talked to anyone. It made everyone very anxious. Um there was just some things that that played out that it was like, all right, this is intense to start with and now it's compounded. Um but it was yeah it was it was quite difficult.
>> So can any of you tell me like have you worked other cases where this >> I think that was just a lot of word salad right there. I don't even know what he said >> has happened the you know the lack of evidence has become you know the key evidence in a case >> for me the short answer is no.
>> Never.
>> No not like this.
>> Not like this. Okay.
>> They've never seen a case like this.
You want to hear that again? You know, the lack of evidence has become, you know, the key evidence in a case.
>> For me, the short answer is no.
>> Never.
>> No. Not like this.
>> The lack of evidence is like the evidence.
Do you guys understand that the lack of evidence is the evidence?
I've never seen anything like that.
Never. Never. Never.
But this is just some stupid kid.
This Okay. Um, >> and you don't want to you don't want to talk to this man and get him to like say how he did a bunch of [ __ ] This is not somebody who you would want to this is exactly who you'd want to hey we want to know how you did all of this stuff that this is the type of person that you would want to get information out of.
I know in a lot of these case in cases there's a point where you know you get you hit roadblocks there's frustration um you can't get any further and this one definitely seemed like it had many.
How do you how do you work through them?
How do you work through each each roadblock that you got to?
>> I guess for me it's really looking to see what the next step is that we can do and really the next step for for at least where I was sitting in my se was to reach out and get additional help.
You know, I'm a senior digital forensic examiner, but I wasn't finding what I needed to find. Um I used other examiners at my lab and we looked at it together. We still weren't finding anything. So, it's always that check and balance just to make sure you're not missing anything. And then what's the next step? Like who's smarter than I am?
I'm not the smartest examiner in the room um by far. trust me. But um I knew who to reach out for um and that's how we got moving and that's really what what I want to portray for for this partnership.
>> And I think that pressure what you just said. So then we're in a room like why aren't we finding it >> and we can't really talk to anyone. So we would leave and we would call Josh Hickman and say hey we found this weird thing. Do you know what it means?
Because we're in a room with no internet.
>> So now let me tell you something. This whole thing talking that you like talking to Josh Hickman. I think it's amazing that they went to him like you want to go to but he wasn't they weren't allowed to do that.
You understand that?
That's my understanding of this protective order. You can't go and talk to people that aren't part of the protective order.
And I don't like don't get me wrong, I don't want you guys to take this the wrong way. It's like, "Hey, we want to talk to this person, Josh Hickman or whatever the hell his name is. He is the best Android guy."
Okay. Well, then you have to bring him in the right way, right?
But listen, you guys, they couldn't take Listen to this. This is this is really really important because in this we're we're about to narrow down on who who the leak was because listen to what they were saying right here. We didn't have access to the [ __ ] We had to go to the lab in this room with no internet. Like we didn't about like not being able to bring their phones in and [ __ ] And so it's like it's like they were walking around with the extraction.
It was nothing like that according to them. And I'm going to believe them.
Which then you were able to start eliminating people that who could have possibly been a leak.
>> So we would we couldn't research. We were on our phone because we're in a room >> with no internet. So, we would we couldn't research. We were on our phones and calling Josh and trying to take notes that we could remember or taking a picture of our notes so then we could research it when we got home. And it was a constant back and forth and every time Jeff or the team would come in like we don't have anything yet. So, that was extremely frustrating. And then figuring out why don't we have it? Is it because it was 48 days and the evidence was purged? But then slowly realizing that he cleaned up like he prevented his digital footprint. The laptop was worse.
He went all the way back from October.
The phone Jared will dive into a little bit on it was less of a cleanup and he became a little bit more sloppy with it.
But I'm curious if he did all his research on how to do the cleanup because the stuff that he did most people wouldn't know on the laptop because that gap was so big.
>> Yeah. I mean, I think initially >> why wouldn't he just buy a different laptop and then destroy that laptop to do all that with? Let's be honest. Why would I would just go buy a laptop in cash? Okay. Right. And do all of my looking up how to do any of this stuff, right? And then trash that.
Like you're never going to get your hands on that.
It just I guess I struggle with what are people not understanding? You just don't let people get your hands on your devices.
So my question is is why didn't Brian just get why didn't Brian just throw his [ __ ] away?
Get a new device.
I mean, [ __ ] Molly did it. Nothing happened to Molly.
Oh yeah, cuz it would look bad. What would look bad? that you got a new phone like when you got to Pennsylvania because you dropped your phone in the toilet and you had like and then your dad you're in a hotel with your dad or you like have your dad witness you [ __ ] up your phone. I'm just saying why the [ __ ] would you ever keep your [ __ ] for the for the mere fact that and I say well cuz his personality is is he wanted to be the smartest person and he wanted to like say like you're not going to be able to find anything so go ahead. You know I just I don't know. I don't know why people just don't get get rid of their devices.
>> Trying to approach this piece of data was was challenging. It it's a little odd to come in like get that invitation.
Hey, come in. And I'm like, I feel like I found something. But >> here's my bag of you know what, Jeff probably already found that, right? Um and and and just sort of working through, you know, like the curiosity in us as digital forensic examiners. You want to go down the rabbit holes. You want to, you know, check every box. and and so I definitely fell victim to that of like probably redoing work that you had already done, but the reality was the evidence to be found was in the stuff that isn't easy, isn't parsed, and that you know really isn't in your face.
Uh and so it became a very slow manual process of basically um doing searches for anything that had a time stamp in all the formats of time stamps to go look for that was within the scope of when this crime happened. um running keyword searches on the entire file system just hoping for one hit of a victim name um and then finding a hit and it's like oh well that's just the Reddit article that was after the crime right so there was so much noise and so much just unknown >> okay right there this is what this is what wants to prevent there is so much unknown there's also he's going to talk about like his he's about to talk about Brian's pattern with his phone and Syra is over here saying No way is that best practice for you to talk about any type of pattern with anybody's phones when you are talking about having half the data or onetenth of the data and doing it then in such a small window of time because now I understand what what a Taylor was arguing about which was these people can't testify a pattern of life with with cell phones that there's no data in or very little data but more importantly we're talking about the time frame you also don't have enough time to say this is his pattern. I'm going tell you why. Because he started not to use a VPN when he got home.
And this is why Ann Taylor went out and sought out an expert to talk about there's plenty of reasons why you would do X Y and Z things. Okay? And why would Brian if he's at home on his house at his house need to do certain things versus when he's on campus and everything is like you're you're being more protective of your [ __ ] because you're on this camp like you see what you signed. Um, so I want you guys to pay attention and listen to what he's about to talk about right here because this was really interesting the argument on the other end of it. And that's what Ant Taylor was going for. And it was something recently that had come out in these documents which was about uh VPN's because we're going to talk about Brian getting sloppy after the murder that he wasn't doing the things that he was doing before the murder. Okay? And so I just want you guys to to listen to this.
uh and a lot of time spent looking at a whole lot of not the not the smoking gun that we're looking for.
>> And the only thing I would add to the the the group here is the flashlight was there like if you looked at it in the timeline the his normal activity normal activity normal activity and then oh absolutely no activity for a certain time frame obviously the time frame around the homicide and then activity again. So there was that beacon of we need to look at this but it was that deep dive that that you needed to do.
Uh, >> there was four times that this happened, though.
What happened on the night of the murders happened on his phone four times.
>> Four times. I want to know what those other times are.
>> Um, that just doesn't come out with just general regular parson.
>> Yeah, maybe let me let me just take that one step further. When we showed up, Jeff handed us a piece of paper. It wasn't like we had to figure out where this time frame was.
>> Uh, beautiful.
>> It was the cast team. So, they do the the mapping, the cellular mapping.
>> So, listen to this. So their part is is that if the time of the crime isn't truly the time of the crime, then none of this ma then none of this means anything.
You have to be so certain on this time of the crime for then this to match up with his phone.
So, for example, if the crimes started at 252, 253, that's interesting because that's the same time that they're saying that Brian is allegedly turning off his phone, but he's in but he's in Washington.
So, how could the crimes have started?
And I think that's the route that the defense was going that that's the route that I'd be going. Okay. like this [ __ ] started at this time. Brian is not there. He's not in Moscow. If you're going to go off of his phone, you have to put him in Washington.
And so, hold on one second. I got to take this call. I'm pressing for the FBI. uh they had looked through uh his historical records and and tried to pick out any time where his phone was was had a dead period, you know, no activity for at least the same amount of time as when it was powered off on this night. And so we had four different time periods to sort of go look at. Um but one of them was obviously when the homicides had occurred. So we didn't have to figure that part out. It was like this minute to that minute. And we had to figure out the sort of the things around it.
>> And think about when you said normal activity, normal activity. He was not normal. Um his nor he had 16 contacts. I think 18 total. One was like AT&T, customer service, maintenance. So he did not have friends. He did not chat with people. He had hour-long conversations with his parents. So it also felt weird on where where is the normal? So his normal was also really uncomfortable for me.
>> Astric his normal.
>> Yes.
>> So with all this information or lack of information, holes in his, you know, um in in the evidence in the digital trail, um was there like one specific moment?
Was it an aha moment? Um, or was it just like a series of, you know, little moments that finally came together? I guess what what really clicked?
>> I think it was the little moments that kind of came together. His hard drive was glaringly absent. And for me, that was weird. So then I had to walk myself through, okay, how do I teach people this log means this, this file means this. But then when you're cleaning the file that tracks the cleaning, I was like, you got to be kidding me. And then I also was thinking, what will the defense say? So the whole criminology, like he has this, is that normal? Could he have been researching something?
Sure. um the fact that he had eraser on his system, I can't prove that it didn't run when a virus scan ran. So, there were so many things that just gave me doubt, but I think all of that cleanup, what are you hiding? That was the biggest thing for me.
>> Yeah, I agree.
>> Yeah. So, for the for the Android, it was I don't know. It was it was a slow process for sure. Um and I know Josh Hickman was mentioned in the thing.
Josh, where you at?
>> He's hiding. Where is he?
>> Wave your hand.
>> There he is.
>> Um >> that guy needs a ton of credit.
Actually, let's give Josh a round of applause.
So, so my approach on on, you know, trying to figure out anything with Android was I went to Josh's blog and just started basically like relearning all these files and what they do and their behaviors and what they're supposed to have in them. Made a list and then I went back to the data and I was like, "Oh, wait. He wasn't arrested until 48 days later. So, all of these files that are so good, there's nothing left in them. They purged." So, really went digging into again just finding any time stamp that was associated to this moment. Um, and we found a couple files and and I guess the bigger picture that sort of these aha things got kind of came together was he was let's say his normal behavior was he would browse the internet like you and I and and he would you know do his things but at some point leading up to the crime months before he started to use a VPN which is not by you know by itself uh indicator of crime.
But then uh right as we lead up to the days of of the crime about to happen he went in and turned off his Wi-Fi on his phone. So he didn't want it to connect to anything which is quite odd. Um that was a file that is not understood by us.
It was a random thing and it was a text to Josh like, "Hey, I'm seeing this file. This is what the log looks like. I don't understand it, but I think it might be this." And Josh said, "I got you." And he starts testing. One of the very fortunate things in this case was Heather had the exact phone model on the same carrier that BK had. So then we were able to do additional testing on these things and become confident in sort of the findings. Um, I would say probably the most damning thing and and you mentioned the sheath and the sheath definitely gets us to him.
>> Okay. No, it is not Joshwitt. Okay, this is another forensic guy. He did a lot of work in this case, right?
Uh, but I think the most damning thing for this being a premeditated crime is the confidence that we had in saying that he was awake at 2 whatever in the morning physically pressing the button on the side of his phone and that device powering off while it was at 100% charge. Right? So, I think what that does for us is the defense might say, "Well, phones die when you're, you know, at home asleep, forgot to plug it in, whatever." All of that was gone, right?
We had him awake. Now, I want to know how they had that because in something else they're saying with if you actually go into when you go and read this write up in the um uh the body of what this is about, they say that all of the information about the battery life and um the status of the battery, it was they didn't have that information.
the the power log here. I'll just read it.
So, this is interesting to me.
There was so much data that was gone forever. Buffer logs, privacy dashboard, battery stats, and battery usage never to be retrieved. Yet, we knew there was so much more to learn inside the digital witnesses.
See that right there?
Read that sentence five times to yourself. And now tell me what you think that that means and it's very normal and you should be doing it. You're always going to ask yourself, you have to play devil's advocate to your own [ __ ] When you find something, you have to say, "What else could this mean?" So when they say something like, "I had to figure I had to see what the defense could possibly say." that if you don't do that as an expert, you're a [ __ ] idiot. They're doing that. That's the right way to go about this. Okay? You have to say, "If I find something, what else could it mean?
What could the defense say?" That's what that means.
Okay? If you don't do that as an expert, you're a [ __ ] idiot. And you're not going to be around very long in the industry. Promise you that. You're gonna look like a fool when you're on cross- examination.
So, when you find something, what can it mean?
There's a lot of different things that it can mean, right?
If the phone's off, right? Well, how did it die? Was it turned off? Was it like So, there's that's how you do things.
So them saying that anybody that's in the comment section writing why the [ __ ] would they do that or boo or whatever.
Nope, you're the boo and nope, you're the wrong one. So just straight shooter over here. How they're speaking about this is exactly how you want to go about it.
My question is is that since we found that there was a glitch during the Karen Reed case, we found out that Celebrate found a glitch during the Karen Reed case. All right. And that when you were to open up a tab, okay, when you got into the tab and when you actually did something versus when you opened it, there's a huge ass difference. Okay? Like the Google search was not at 227.
That's when that tab was originally opened. The Google search was at 627, 624, whatever the [ __ ] 623, whatever the time frame was. Okay?
And so what that would mean is that you have to that works across the board.
Then that's not just John O'Keefe's device or um McCabe's device, right? That's a glitch throughout the system throughout the Cellbrite. So anytime that you would download and you're working with something in that that version or whatever, there's a problem. Well, how many people did that affect the opposite way?
Okay. So is there is there anything here where it's going to come back and possibly say that hey you know that glitch that there was like it's making it seem like it's something right. So if we use the Karen re case to show that yep we found that there was a glitch in something right and it had to be changed that's a problem okay because we actually tested and blah blah blah.
Well you got to keep that right there where it's at. So things have been shown to be wrong, right? Correct. Or it's being interpreted wrong. Okay. And then somebody ran with it, right?
And then they never got it corrected, right? And so Turtle Boys right now saying I'm untouchable because I'm going off of what an expert says, yada yada yada.
Well, I can't wait to see how that plays out because after the expert after Karen Reed did not she did not put up an expert against it in in trial 2. Why?
We don't want to confuse the jury. I mean that phone stopped and that pocket state's really really interesting because for me that was like huge and that's why I was like looking at other ways that well hey what if Karen actually dropped him off at a different address because they got lost and then so when he's making his when he's making that trip on over to actually third for Fair View he's with somebody else putting Karen in a very good position, okay? Because she doesn't know where the [ __ ] she's going. She has no idea if if she pulls up to an address, like she doesn't know where she's at. And so she could be dropping somebody off and she thinks that she's dropping them off at this place. She's never been there before, so how the [ __ ] would she know?
She would not.
So that's you look at different ways that something could be like, what else could there else could this be? Also, John O'Keeffe took those steps earlier, which goes with what I was trying to say is if she dropped him off at the time, right before he's punching in to go to 34 Fairview, she's over here thinking that they're at 34 Fair View. He goes up, tries to see if that's the right house. Um, whatever the hell they're doing, blah blah blah. And then I don't know what John did or but is it possible that Karen was just sitting outside at a different house waiting, waiting, waiting. He doesn't come. She thinks the [ __ ] house isn't She's like there's nobody. It's all pitch black. Looks like nobody was home. Well, it doesn't sound like you're at 34 Fair View. Okay.
And maybe they don't want to talk about where they went first over there because it was to maybe pick up Coke. I don't know. A lot of people um uh lie about stuff that actually has nothing to do with actually the crimes, but they don't want to out themselves and whatever the [ __ ] they were doing.
or what they're into or what the [ __ ] ever it doesn't I mean but here for Brian to have messed with his phone supposedly like all this much how can we be so confident what any of this [ __ ] is that's what I have a question about how are we so confident about you can say and then the time so um if you want to do pattern of life with somebody's phone, you have to do it over an extended period of time cuz otherwise there's just so many coincidences or anomalies like you can't nobody should be able to testify. That's what Sire is coming out and doing right now. And it's actually [ __ ] amazing because it it helps us all. So when you go and get a search warrant, we're always like, "Oh my god, why are you why are you asking for a search warrant that's so goes back so far?" Actually, what they're doing is the new way to train is is you want to ask for to preserve the preserve the data that takes you back that far. Okay?
Preserve that data. And you're explaining the only way you're going to get a search warrant to actually then search the material is in your search warrant. You're explaining what you're going to be using it for. And it would be for um pattern of life. P like I think they're Yeah, they're calling it pattern of life. So P when you explain it like that, then you need that data because then it's going to, you know, innocent people um as well as guilty people. If you're going to try to talk about a pattern of life, you have to talk about a six-month period. If you think that you're going to be able to talk about a pattern of any of our lives with our phones for a week or two, dude, what if it was spring break one of one of those two weeks?
What if it was around the holidays? What someone's birth all these things? You cannot do that. And he's saying that the best best practice is 180 days.
So they went off of pattern of life for Brian Cobber off of a couple weeks. Are you kidding me? No way. You can't do that. That's where we need to ask them.
What did you do this pattern of life with Brian Cobber off of?
What? Four weeks, 8 weeks, 12 weeks?
That's not long enough.
That's not long enough.
Nowhere near long enough. And what Cyra wants to prevent is from that ever being testified to in the courtroom.
And that's the golden ticket right there is you should not be able to testify to pattern of life without the necessary time frame.
Tada.
So we want people going and getting preservation orders for our data or for the data that's in the cloud or in this like you want it to be that the p that it goes extends out and if you can do six month is best practice and now if you think about it it makes the most sense because that's how you as a defendant one day as an innocent one can show when you have these other times that it would look like it's x y and z. Were you committing a crime then too, you know? Um or, oh, I did it because of this. I did it because of that. Like there's just not enough time. You shouldn't be able to testify to it. And that's all that new thing is all about is it's preventing anybody the state the state only going and getting a certain amount of data. so they could testify the pattern of life. Get the [ __ ] out of here. So Cyra is preventing that from happening to for for you know for our rights for whoever is ever ever going to be in that chair.
Okay.
You should not be able to testify to pattern of life with a phone in a couple week period in a month period in a six week period in what?
And and that's how it should be across the board. and he wants you to fill out a search warrant and explain why you need the data and that it's for the purposes of this down the road.
Otherwise, you're not getting it. So, that's the other that's the two part of it is that you need to explain that from the beginning when you're asking for the search warrant. You're doing it because we're going to have an expert that testifies to P I see because Brian's pattern of life in when he moved across the country, there is no pattern of life with him. He just moved there.
Okay. It's just saying that that basically you shouldn't be able to use that.
Like you're you're not even in a routine. You know what I mean? You're out doing this.
You're think about what you do when you go to college for the first time. You're just you're just dabbling in [ __ ] everything. There's a pattern. No, there's no [ __ ] pattern here. I'm like, "Oh, getting invited to this party. Oh, going over here. Playing golf this part." I mean, come on. Like, that's just ridiculous to anybody. And you shouldn't be able to testify to it.
And that's just the bottom line is no expert should be able to testify to parent of life without an extended amount of data.
Neither side period. You're it's not coming in. And that's all is that this [ __ ] should be inadmissible.
Period. But but it should be admissible if you have the length of time necessary. But when you're missing all this data, like how do you even testify to that?
Cuz then you don't even know. So you're just going to testify to what's there?
That doesn't even seem I mean that's just and that's what an was arguing is how is this admissible and it shouldn't be like what are the barnards testifying to? What's their purpose in this?
They needed the Barnhards to figure out that he powered off his phone and powered it back on. Jeff Tanzola couldn't even do that. That's interesting to me. I want to know why. I want to know how. And if they're saying, "Well, he he tried to he tried to delete it. Oh, he did." Well, explain to me how. How did he try to delete that?
Walk us through that steps. Or do we just say, "Hey, none of this is coming in."
I don't know.
It's like the pocket state for me with John's cell phone in the Karen Reed case. I'm like, that's the first case that I've ever heard about this pocket state of of your phone. If it's not seeing light, if it's down like this and then it it's like it's like comes out of your pocket, so it sees the light. Okay.
Um, and so I just think that's an amazing thing. I think that when we want to talk about even John's phone going in a Faraday bag, it would have still affected the P.
It would have still affected the pocket state.
Okay. And there is no disruption. So, how did that happen? Unless they did this in the dark.
You get what I'm saying? Like, come on, man.
That pocket states really And I just think you need a better way of explaining that in the Karen Reed case.
And it would I'm telling you that [ __ ] was hidden hard with um with the whole moving of the body.
How could you move John's body and not um get steps on that phone and put it in a fair day bag without the pocket state being affected? It's like it's almost impossible.
But I'm willing to hear where's way ways because I've been thinking about it for since it since that case the second trial happened because if it's in his pocket and you try to carry him and you walk with him, okay, then it's going to register the steps.
So you couldn't have put him out on the lawn like at 3:30.
Um would you have known to like go in his pocket and before you take it out, shut it off for a little bit?
just it's just a really interesting I would I would love to talk to the Barnharts about it and to hear just to be like in a room where you're on like a Zoom and just here these are some questions and you know how can you consider this this this this you know whatever I always like to throw some of my logical questions at them and and then answer logical questions um and that goes for any expert I just have here are some logical questions answer them >> for sure. Turning it off and then a little over two hours later turning it back on. Um when he turned it back on, we had found another file uh that sort of does a am I near Wi-Fi, am I near Wi-Fi and then he wasn't near any known Wi-Fi. Um so the log was again painting another picture and Cass was able to say like all right, he's now hitting a tower that's way over here. He's not at home.
>> Can I just I just want to explain Cass.
So the cellular analysis uh surveillance team >> so like that doesn't make any sense with me. If he shut off his locations, then why would his phone ever be trying to to connect to anything on the night of the murders, right? If before if a couple days before the crimes he went in and he shut off his Wi-Fi so that he wouldn't his phone wouldn't be communicating and trying to find anything, right?
So then how does that work with and they're going to say well that doesn't have anything to do with not being on what the cell towers because your phone still communicating with other apps that were still running location services cuz explain that to me cuz if I shut off my location services period across the board that wouldn't happen at all right and so you're going to sit here and tell me that Brian Cobra did not shut off his location services period he had some apps that were still doing that, you know, I want to hear about that.
But when I found out that they were not allowed to leave um that computer lab, like they went in there, they didn't have internet. And I'm just like, wait, what? And they just had to work on like looking through and figure with because of this gag order. I'm like, first of all, how the [ __ ] is that? What kind of working conditions is that? What do you mean you guys didn't have internet?
That they couldn't like look stuff up, like look stuff up or do like they had to take notes.
And um I want to know how many times the Barnhards went to Idaho prior to the plea deal.
like when did they ever go out to Idaho?
Um just to check out that area and and B if she has the same phone as Brian I guess did I would have taken my phone out there and just seen how it was with my phone and the and the service and everything.
So, >> so not only did we do the digital forensics, and I say we, I'm saying we the FBI because I don't do cast, but but then it's also marrying it up with the call detail records like the locations, the stuff you can get from tower dumps and things like that. So, we >> and he wasn't on any of those, but he does he wasn't on tower dumps. What tower dumps was he on?
>> He married up both of those together and they were key components. So, the for people that don't know what cast was.
>> Yeah. Yeah. Yeah. And and so you just you saw this this pattern of life that changed.
>> There it is. And you saw this pattern of life and this is what I've been this is what I've been preaching about on this channel for the past at least month.
Every single day I've been talking about P and that this is absurd because there's no time to really evaluate the data. And this is what you should not be able to testify to.
You shouldn't be able to testify to it in this case or any case unless you have six months worth of data and it doesn't come out from either side. This is what Cyra is is trying to prevent like moving forward. Like this is his peer review and this is something that he's working on extensively leading up to the crimes.
Yeah. Yeah. Yeah. And and so you just you saw this this pattern of life that changed leading up to the crimes. And then on the other side of it, now that he's committed the crimes and is settling in and hyperfocused on all of the news and everything that's happening, you saw him stop using the incognito mode that he had started using, you see him stop using the VPN.
He goes back to his normal, which I think is pretty damning in that like basically building up these walls around the moment that he knew he was going to commit a crime.
>> A perfect book end.
>> A perfect book.
>> These findings, all this work, all that you're seeing, you know, that would have been presented at trial had there been one. Um, and it could have led to a jury convicting him. Um, but as we know it ended, he took a plea deal and so I guess how do you feel about your work ending in this resolution with his plea deal?
>> Want to go first, Jeff? Go ahead.
>> I didn't want to, but I will. Um, yeah.
I mean, it's kind of bittersweet. I mean, you know, I think ultimately we want we want to see the the um subjects being held accountable for their crimes.
Um, I'm confident that that that was the the subject. Um, but, you know, again, I'm I'm praying to the room here. you don't know what the juryy's going to say. You don't know about jury appeal.
So, I mean, that is a factor in there.
Um, there was a lot of of dots that we had to connect um to piece everything together. Uh, I'm not a prosecutor. I'm not an attorney. I didn't sleep at Holiday Express last night. Um, that's a joke, people.
Um, but so, so I I think there's a lot that goes into it. I I try to keep myself in >> We sleep in our labs basically. Like, we're always one working and you guys are just like at the at the hotels getting [ __ ] massages. You you lawyers. you >> my little corner and that's presenting the case to the prosecutor and I think we presented um the best evidence that we have moving forward, the best evidence that we could come up with at least on the digital evidence side. Um and then it's up to the prosecution to make those decisions.
>> So I I remember when you called saying that he he was pleading and I watched the entire thing. I was on a plane flying to go teach and I watched the victim statements and the impact statements and all of that and I was relieved. And that may make me sound like a horrible person for being honest.
I was so rude because when we were subpoenaed for four months, um we were in the middle of personal stuff and moving all around trying to do a mock trial, the three of us to prepare because everyone else is on the other side of the country. So when they >> they were doing a mock trial, see maybe they can come and do our mock trial.
Okay.
Um uh let's see.
Okay. said he was playing. I was like, "Oh, this is good." And then we reached out or Kayle's family reached out to me and I actually thought it was spam. I was like, "There's no way someone sent a message to my Gmail." But Jared and I went out and we met with them and one, they wouldn't have gotten what they wanted from our testimony. We are going to say, "I'm curious about this whole like four month thing. I want to look more into that, but this is kind of where I wanted to end because I want to do a second part for the second half, but this was the most important part.
Um, was this beginning part and then you guys can go. It's on celebrated seeking the truth through the data honoring the Idaho 4.
>> He turned off his phone. He did this. He did this. That's it. They wanted to know what did he search for? Um, did he have a girlfriend? Did he have dating apps?
Did he have friends? Did he do this to other people? Did he stalk? So, they actually got more of what they wanted from the investigation in that visit than they would have from the trial.
>> Yeah, I think relief was I mean the the process, as we said, wasn't perfect. and we got a call on a Wednesday and said we need your report for discovery on Friday. Um, so that was very challenging to produce anything near uh, >> can you believe that? And that has nothing to do with the like the discovery report, all that stuff. That's for the trial. Why is Bill He knows discovery deadlines? Why would you be telling the Barnharts that they have to get in their Were you deciding like I mean how Bill knew all of these people knew these deadlines like so far in advance because Hitler set them all out.
Can you believe that?
It's the truth. This is how bad this communication was. It was also like they knew, I'm telling you, they weren't going to be using certain things because the these prosecutors were [ __ ] so nervous to use certain people because >> we would would want it to be. Um, so yeah, there were there were a lot of things and I think even, you know, every trial has risk. Anyone who's been to a trial, there's there's tons of risk that's built in. And in this case, they were changing venue and it's a very, you know, small town type type of place. Um, there's risk and so I would say relieved for the plea, but understanding that, you know, some of the victim families are not not pleased with that. And I also think, you know, we talked about the pressure of trying to find digital evidence on the phone. There's also pressure with being put on the hot seat on on the stand, you know, because you don't want to be the the one up there that either says something uh or does something that that turns the case in the wrong direction, even though I'm confident that we had the evidence. We knew what we were putting forward, at least as our team with the digital evidence. Um, but that is also a huge pressure away from the families, the victims, all that stuff is is weighing on you as well. So, it is it is a tough place to be in. It was definitely shocking. I know for me too. I >> All right. So again, go check it out. Um this pattern of life stuff though. This is what Cyra is saying. No, no, no, no.
This is not going to you cannot do this.
Celebrate. You go to their channel. It has 628 views as of right now. And it is called seeking the truth data honoring the Idaho 4. I threw a I threw a comment in there. Here. Looking forward to watching. Thank you all for your hard work when they were introducing each other. Uh at the end of the day again this is all about respecting people's time. This is all about respecting the process. This is about respecting stuff that you consider like um the field that you work in. And so at the end of the day you can it's like science guys. There's there's different sol there's different things like when something happens hey why did that happen? Well, it could be this. It could be this. It could be this. You know, I felt like in science, nobody should ever get an F because it's like, dude, I didn't get the wrong answer.
What do you mean? This could totally have happened. Look at my look at my science experiment. It [ __ ] fell apart here. Clearly, it could fall apart. Like, so, um, it's it's about the methodology, okay?
Is your methodology [ __ ] there's there's a way that you go about something and if you can't explain your methodology and how you did it and and this is the so I did this across the board with all of their phones and you know yeah so for me if for you not to you have to respect the people that are in the field and then you ask them questions like hey how did you get to that or where did you find that you know um because it's not about there there's different we're not Brian Kberger we have no idea why Brian Cobra used a VPN. I should never be [ __ ] testifying to why a VPN was used. I could testify to what a VPN can um can do for you, but I can't be testifying to why the [ __ ] Brian Cobra used a VPN, you know. Um so, so embrace the people that actually want to take this on and you know, figure stuff out. Um, but there's clearly a lot of issues here in this case, okay? And they've never seen a case like this. And I want to know why. And I want to know like, hey, wouldn't it be like isn't this somebody that you'd want to get answers out of?
If you think this is so like mind-blowing, like, hey, how did this Yeah. And so it's just like, well, Bill was just like, yeah, just say you're guilty and it's fine.
It doesn't seem like that would be the case that you would do this in.
So, until next time, guys, which is going to be soon because we just got lives all [ __ ] day today. We're getting everybody rowdy in this [ __ ] I'm here to [ __ ] ruffle some feathers, but not with people like what they're doing. We need people like this, guys. We want to ruffle the feathers with the [ __ ] with the liars.
They're not lying about what they found.
This is the possibility. This is how this could be. Yeah. Awesome.
But it but this could also be that too.
Correct. Yeah. Awesome. You know, um the only thing I have new is that you here, [ __ ] Yeah, girl. Yeah, girl.
Lori Davidson. Yeah, baby. Mhm. Get that seven-year-old grandma ass on, baby.
Shake that ass, [ __ ] And let me see what you got now. Shake that ass.
Have a good day, Lori Davis. I couldn't be more happy that you decided to come to my channel and write on my [ __ ] wall. Thank you so much.
Be a Lori today, guys. Go out and snag some [ __ ] grandma ass, baby.
Woo! [ __ ] let me see what you got. And I shake that ass. Go grandma. Go grandma. Go.
You're rolling with the best, baby.
Peace out, guys. Don't let your pubic hair get twisted.
Ähnliche Videos
She Lost Her Car... But We Still Helped Her!
RecoveryBoyz
129 views•2026-05-30
Deadly Got Talent Auditions You Should NEVER Try at Home!
gottalentglobal
5K views•2026-05-29
Cozy Cottage Jazz | Warm Morning Cafe Ambience 🌸
villagejazzhouse
846 views•2026-05-29
DeBoer Wants Alabama Tougher, Texas Tech Calls out the Texas Longhorns | TNR 5/29/26
NextRoundLive
2K views•2026-05-29
Smart Working Techniques for Faster and Safer Jobs Part 54✅ #construction #adamrose #workers
worksmart-98
2K views•2026-05-29
LIVE: Move Into Friday with Special Guest Ed O'Brien | Morning Becomes Eclectic
kcrw
778 views•2026-05-29
On Bended Knees - Jekalyn Carr (Official Live Worship)
halalafrika
7K views•2026-05-29
Black Hills To Badlands In A Nova Bought SIGHT UNSEEN-Going To Towns Tour with HUNDREDS of CLASSICS!
ViceGripGarage
52K views•2026-05-29











