1
00:00:03,040 --> 00:00:07,360
Speaker 1: On August fifteen, twenty twenty three, a Victoria Police digital

2
00:00:07,400 --> 00:00:11,559
Speaker 1: forensic officer named Sharman fox Henry was given a job.

3
00:00:12,520 --> 00:00:16,800
Speaker 1: His job was to uncover traces of digital information information

4
00:00:17,000 --> 00:00:20,160
Speaker 1: that had been found on a computer seized by police

5
00:00:20,200 --> 00:00:26,280
Speaker 1: from the home of Aaron Patterson. After extracting the data,

6
00:00:26,560 --> 00:00:30,720
Speaker 1: mister fox Henry ran a keyword search typing in terms

7
00:00:30,760 --> 00:00:33,159
Speaker 1: to see if there were any matches.

8
00:00:34,640 --> 00:00:46,400
Speaker 2: Deaf cap, deaf cab, mushroom, deaf cap, mushrooms, mushroom poison.

9
00:00:48,440 --> 00:00:51,680
Speaker 1: Today in court, mister fox Henry was asked questions about

10
00:00:51,680 --> 00:00:56,960
Speaker 1: what he found. I'm Brooke Reebert Craig and this is

11
00:00:57,760 --> 00:01:03,240
Speaker 1: the Mushroom cook. Day sixteen of Aaron Patterson's murder trial

12
00:01:03,280 --> 00:01:05,679
Speaker 1: has wrapped up, and once again I'm joined by a

13
00:01:05,680 --> 00:01:07,080
Speaker 1: court reporter, Laura Plasseller.

14
00:01:07,680 --> 00:01:09,639
Speaker 3: Good to be here with you. As always, It's.

15
00:01:09,520 --> 00:01:12,200
Speaker 1: Been quite a day to day, hasn't it. Yes, it

16
00:01:12,280 --> 00:01:15,440
Speaker 1: has so. The jury has been given many lessons throughout

17
00:01:15,440 --> 00:01:18,880
Speaker 1: the trial, including lessons on mushrooms, but today it was

18
00:01:19,000 --> 00:01:20,600
Speaker 1: all about computers.

19
00:01:21,360 --> 00:01:23,800
Speaker 3: That's right. At the top of the episode, our listeners

20
00:01:23,800 --> 00:01:27,560
Speaker 3: were introduced to Sharman fox Henry. He is part of

21
00:01:27,600 --> 00:01:31,600
Speaker 3: the Victoria Police Cybercrime Squad. And he took to the

22
00:01:31,640 --> 00:01:34,399
Speaker 3: stand today, like you said, Brooke, to give the jury

23
00:01:34,480 --> 00:01:37,160
Speaker 3: yet another lesson. It's fair to say that will be

24
00:01:37,200 --> 00:01:39,560
Speaker 3: pretty well versed I think in a number of topics

25
00:01:39,600 --> 00:01:42,720
Speaker 3: by the end of this trial. His evidence began with

26
00:01:42,880 --> 00:01:46,560
Speaker 3: a slide show and the first slide read what is

27
00:01:46,600 --> 00:01:49,880
Speaker 3: a computer? So we started very much with the basics,

28
00:01:50,200 --> 00:01:58,800
Speaker 3: and he slowly walked the jury through evidence around computers, files, folders, thumbnails,

29
00:01:59,160 --> 00:02:02,400
Speaker 3: and even some more technical things known as artifacts. And

30
00:02:02,440 --> 00:02:05,760
Speaker 3: he explained that artifacts can range from a Microsoft word

31
00:02:05,800 --> 00:02:09,280
Speaker 3: file to a web browser cookie.

32
00:02:09,560 --> 00:02:12,760
Speaker 1: Now, a number of devices were seized from Aaron Patterson's

33
00:02:12,800 --> 00:02:15,799
Speaker 1: home and mister fox Henry was one of the officers

34
00:02:15,880 --> 00:02:17,280
Speaker 1: who examined them.

35
00:02:17,919 --> 00:02:21,800
Speaker 3: Yes, so the jury previously heard that several devices were

36
00:02:22,320 --> 00:02:27,520
Speaker 3: seized by police from Aaron's home when warrants were executed

37
00:02:27,600 --> 00:02:32,360
Speaker 3: on August five and November two, twenty twenty three, August

38
00:02:32,400 --> 00:02:36,520
Speaker 3: five being about one week after the lunch and in particular, today,

39
00:02:36,840 --> 00:02:41,200
Speaker 3: mister fox Henry was questioned about a Cooler Master computer

40
00:02:41,520 --> 00:02:45,080
Speaker 3: that was found, Cooler Master being the brand of computer.

41
00:02:45,680 --> 00:02:48,800
Speaker 3: He walked the jury through his job as a digital

42
00:02:48,800 --> 00:02:54,080
Speaker 3: forensics officer and how he extracts data from devices. He

43
00:02:54,160 --> 00:02:57,880
Speaker 3: explained that the beginning of that process involves creating a

44
00:02:57,919 --> 00:03:01,919
Speaker 3: copy of the data which is the case, and from

45
00:03:01,960 --> 00:03:07,040
Speaker 3: that case he can run analysis for the investigators. He

46
00:03:07,080 --> 00:03:09,400
Speaker 3: told the court that he was asked to run a

47
00:03:09,480 --> 00:03:13,360
Speaker 3: keyword search for five terms. Those terms were the ones

48
00:03:13,400 --> 00:03:16,440
Speaker 3: you heard at the top of the episode, death cap,

49
00:03:16,919 --> 00:03:21,800
Speaker 3: death cap, mushroom, death cap, mushrooms, mushrooms, and poison.

50
00:03:22,760 --> 00:03:25,720
Speaker 1: So what was actually found on the caller master computer then?

51
00:03:26,480 --> 00:03:29,680
Speaker 3: So it was at this point today where a forensic

52
00:03:29,800 --> 00:03:33,120
Speaker 3: examination report was brought up on the screens in the

53
00:03:33,160 --> 00:03:36,400
Speaker 3: court for the jury to see, and this contained all

54
00:03:36,440 --> 00:03:40,000
Speaker 3: the records that were pulled from this device. The court

55
00:03:40,040 --> 00:03:43,240
Speaker 3: heard there were records in this report that related to

56
00:03:43,520 --> 00:03:46,160
Speaker 3: a search term. So you think about a search term

57
00:03:46,280 --> 00:03:49,040
Speaker 3: as something you would type into a browser, just like Google.

58
00:03:49,880 --> 00:03:53,360
Speaker 3: This search term was for a naturalists and the record

59
00:03:53,480 --> 00:03:56,520
Speaker 3: showed that this search was made on May twenty eight,

60
00:03:56,960 --> 00:04:01,000
Speaker 3: twenty twenty two, at around seven to twenty p so

61
00:04:01,040 --> 00:04:04,080
Speaker 3: that's about fourteen months before the lunch at the center

62
00:04:04,160 --> 00:04:07,560
Speaker 3: of this trial. To remind our listeners again, I Naturalist

63
00:04:07,800 --> 00:04:11,240
Speaker 3: is that citizen science website we've been referring to that

64
00:04:11,320 --> 00:04:14,760
Speaker 3: allows members of the public to post sightings of plants,

65
00:04:15,160 --> 00:04:18,600
Speaker 3: animals and fungi, which includes deathcap mushrooms.

66
00:04:19,040 --> 00:04:22,560
Speaker 1: Yes, and doctor Tom May and Christine McKenzie both gave

67
00:04:22,640 --> 00:04:25,080
Speaker 1: evidence about this website previously.

68
00:04:25,560 --> 00:04:29,360
Speaker 3: That's right. So mister fox Henry was asked what these

69
00:04:29,440 --> 00:04:32,920
Speaker 3: records meant and he told the court that it confirmed

70
00:04:33,040 --> 00:04:36,599
Speaker 3: a being search was done for iiurnaturalist on this day.

71
00:04:37,000 --> 00:04:40,599
Speaker 3: I mentioned Google before, Bing is another search engine. But

72
00:04:40,640 --> 00:04:43,080
Speaker 3: it is really important to note at this stage that

73
00:04:43,120 --> 00:04:46,800
Speaker 3: the court didn't hear today who made these searches. It

74
00:04:46,839 --> 00:04:49,839
Speaker 3: was simply evidence about the fact a search was made

75
00:04:50,080 --> 00:04:50,880
Speaker 3: on that device.

76
00:04:51,400 --> 00:04:53,799
Speaker 1: And were there any other records relating to the Cooler

77
00:04:53,880 --> 00:04:54,640
Speaker 1: Master computer?

78
00:04:55,160 --> 00:04:58,680
Speaker 3: Yes, there were. After mister fox Henry spoke about the

79
00:04:58,920 --> 00:05:02,839
Speaker 3: search term record, we moved on to some web history

80
00:05:02,920 --> 00:05:06,360
Speaker 3: records and the court heard that after the search term

81
00:05:06,440 --> 00:05:10,400
Speaker 3: I naturalist was made by seven twenty one pms. This

82
00:05:10,520 --> 00:05:16,120
Speaker 3: is about one minute later, the urliinaturalist dot org was

83
00:05:16,240 --> 00:05:20,120
Speaker 3: visited by a browser on this computer. Another record showed

84
00:05:20,279 --> 00:05:24,480
Speaker 3: that two minutes later, at seven twenty three pm, another

85
00:05:24,560 --> 00:05:29,600
Speaker 3: I naturalist url was accessed by the computer. So we've

86
00:05:29,640 --> 00:05:33,960
Speaker 3: spoken about URLs, but the court heard today that every

87
00:05:33,960 --> 00:05:38,560
Speaker 3: web page has a title as well, and the title

88
00:05:38,720 --> 00:05:41,640
Speaker 3: of the URL that was visited at seven twenty three

89
00:05:42,320 --> 00:05:44,760
Speaker 3: and I'll read this out here from my notes was

90
00:05:45,279 --> 00:05:52,320
Speaker 3: deathcap from Melbourne, Vic, Australia on May eighteenth, twenty twenty two,

91
00:05:53,279 --> 00:05:58,800
Speaker 3: at two thirty six pm by Ivan Margitter Bricker Reserve

92
00:05:59,120 --> 00:06:03,280
Speaker 3: Moravin iNaturalist. The court wasn't told too much more at

93
00:06:03,279 --> 00:06:06,200
Speaker 3: all about this web page and what all of those

94
00:06:06,240 --> 00:06:10,320
Speaker 3: words meant. But the jury have previously heard evidence from

95
00:06:10,560 --> 00:06:14,000
Speaker 3: doctor May and miss McKenzie who you mentioned earlier Brooke,

96
00:06:14,600 --> 00:06:18,279
Speaker 3: who have made posts on I Naturalists before when they've

97
00:06:18,279 --> 00:06:19,760
Speaker 3: observed fungi in the wild.

98
00:06:20,800 --> 00:06:23,240
Speaker 1: And did the jury find out how many times these

99
00:06:23,279 --> 00:06:24,880
Speaker 1: web pages were actually visited?

100
00:06:26,080 --> 00:06:29,640
Speaker 3: They did so. Mister Fox Henry explained that there was

101
00:06:29,760 --> 00:06:33,640
Speaker 3: data extracted that related to the visit count and he

102
00:06:33,720 --> 00:06:36,640
Speaker 3: told the court that for this particular web page, the

103
00:06:36,720 --> 00:06:39,880
Speaker 3: visit count was two, which indicated the web page had

104
00:06:39,880 --> 00:06:41,000
Speaker 3: been visited twice.

105
00:06:41,360 --> 00:06:43,400
Speaker 1: And there was another search term that we heard more

106
00:06:43,440 --> 00:06:45,320
Speaker 1: about today, wasn't there there was?

107
00:06:45,480 --> 00:06:49,840
Speaker 3: After the court heard about the naturalist search terms, they

108
00:06:49,839 --> 00:06:52,599
Speaker 3: were also brought to a search term made at seven

109
00:06:52,720 --> 00:06:56,159
Speaker 3: twenty three pm so on this same day, on May

110
00:06:56,240 --> 00:06:59,880
Speaker 3: twenty eighth, twenty twenty two, for the current Borough Middle Pub.

111
00:07:00,680 --> 00:07:03,440
Speaker 3: According to the records, this search was made on the

112
00:07:03,480 --> 00:07:06,800
Speaker 3: computer about two minutes after the search for OI Naturalist.

113
00:07:07,360 --> 00:07:09,840
Speaker 1: That was a lot of detail, Laura, Can you summarize

114
00:07:09,840 --> 00:07:10,760
Speaker 1: it for our listeners.

115
00:07:11,200 --> 00:07:14,840
Speaker 3: I'll definitely try. As I mentioned earlier, everything we heard

116
00:07:14,840 --> 00:07:18,360
Speaker 3: about today was a record that related to a computer

117
00:07:18,720 --> 00:07:22,520
Speaker 3: seized from Erin's home. While the court didn't hear who

118
00:07:22,680 --> 00:07:26,840
Speaker 3: made searches or who visited websites on this device, what

119
00:07:27,160 --> 00:07:30,200
Speaker 3: was made clear was that there were searches made for

120
00:07:30,280 --> 00:07:34,239
Speaker 3: Iron Naturalist, and after those searches were made, web pages

121
00:07:34,280 --> 00:07:38,640
Speaker 3: relating to I Naturalist were also accessed, in particular that

122
00:07:38,720 --> 00:07:42,560
Speaker 3: web page relating to a siding of Deathcap Mushrooms in Morabin,

123
00:07:43,000 --> 00:07:44,400
Speaker 3: which is a suburb in Melbourne.

124
00:07:44,560 --> 00:07:49,360
Speaker 1: Great summary, Laura, Mister Fox Henry also examined another device.

125
00:07:50,000 --> 00:07:52,320
Speaker 3: That's right. We didn't hear a lot about this today

126
00:07:52,400 --> 00:07:54,800
Speaker 3: because by the time it was mentioned it was close

127
00:07:54,880 --> 00:07:57,240
Speaker 3: to the end of the day. But he told the

128
00:07:57,280 --> 00:08:01,800
Speaker 3: court the cybercrime team analyzed the of Gail Patterson and

129
00:08:01,840 --> 00:08:04,680
Speaker 3: we're expected to hear more of what was found tomorrow.

130
00:08:04,840 --> 00:08:08,000
Speaker 1: That's right, and to end the day, Justice Christopher Bill

131
00:08:08,200 --> 00:08:10,280
Speaker 1: gave a bit of a warning to the jury, didn't

132
00:08:10,280 --> 00:08:11,200
Speaker 1: he He did.

133
00:08:11,400 --> 00:08:14,800
Speaker 3: After there were those references made to the URLs which

134
00:08:14,840 --> 00:08:18,080
Speaker 3: were shown on the screen in the courtroom, he turned

135
00:08:18,080 --> 00:08:20,400
Speaker 3: to the jurors and gave them a gentle reminder that

136
00:08:20,440 --> 00:08:23,600
Speaker 3: they should not be going home and googling these URLs

137
00:08:23,760 --> 00:08:26,200
Speaker 3: to figure out where they went to, and they should

138
00:08:26,200 --> 00:08:28,800
Speaker 3: only be relying on the evidence they're hearing in court.

139
00:08:29,080 --> 00:08:31,880
Speaker 1: Thanks Laura, and to stay updated on all our coverage

140
00:08:31,880 --> 00:08:34,720
Speaker 1: of this case, go to the mushroomcook dot com dot

141
00:08:34,760 --> 00:08:35,480
Speaker 1: au for more