Marcia Rodriguez — Direct/Cross
114 linesJUDGE HANKINSON: Did you have another brief witness?
MS. NORRIS: The State calls Investigator Marcia Rodriguez.
MS. NORRIS: Can you please introduce yourself to the jurors?
MARCIA RODRIGUEZ: Hi, my name is Marcia Rodriguez.
MS. NORRIS: Can you spell that for us?
MARCIA RODRIGUEZ: Sure, it's M-A-R-C-I-A, R-O-D-R-I-G-U-E-Z.
MS. NORRIS: Where are you employed?
MARCIA RODRIGUEZ: At the Tallahassee Police Department.
MS. NORRIS: Do you work in a certain department or division?
MARCIA RODRIGUEZ: I'm attached to our Special Investigations Unit as a digital forensic investigator, over 25 years. So when an investigator or an officer has some sort of electronic device or storage media that they think may contain some sort of evidence, they bring it to me and I evaluate it to see if there's anything of value on it.
MS. NORRIS: When you say you're examining items of evidence to see if there's anything you want to pull off of them, like a cell phone — could that be any electronic device, a cell phone, a tablet, a laptop?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: Okay. And approximately how many electronic devices have you extracted information off of?
MARCIA RODRIGUEZ: I've worked on over 1,000 phones.
MS. NORRIS: Okay. And do you use different kinds of programs to extract that data?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: What types of programs do you use?
MARCIA RODRIGUEZ: Um, the primary program that we use is Cellebrite.
MARCIA RODRIGUEZ: Um, we use a couple other ones, but that is our primary tool.
MS. NORRIS: Are you trained on how to use that tool?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: Did you perform a digital extraction, or a Cellebrite, on a phone belonging to Wendi Adelson?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: And do you recall what type of phone that was?
MARCIA RODRIGUEZ: It was an iPhone 4.
MS. NORRIS: An Apple iPhone 4?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: When you perform a Cellebrite extraction on a phone, does it change any of the contents inside of the phone itself?
MARCIA RODRIGUEZ: No, ma'am, it does not.
MS. NORRIS: Why would you do a Cellebrite extraction rather than just looking through the phone?
MARCIA RODRIGUEZ: So one of the things that we do is we make sure that we don't alter the device that we get. We try and keep it in the state that it's originally found in, and so if we manipulate it and kind of flip through pictures and text messages, we may change something.
MARCIA RODRIGUEZ: Also, one of the things that we use a forensic tool for is so that we may — if something's been deleted, if there's a hidden file that the user can't see or they've hidden from view, we may not see it. So we use these tools, and sometimes the tools are able to gather that information for us.
MS. NORRIS: When you do the extraction using Cellebrite, does it basically spit out like a PDF report that you can then flip through and look at to see what was contained in the phone?
MARCIA RODRIGUEZ: We use the software that you use to do the processing analysis of the raw data that comes from the phone.
MARCIA RODRIGUEZ: It gives the opportunity to create a report.
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: A Cellebrite report?
MARCIA RODRIGUEZ: A Cellebrite extraction report, yes, ma'am.
MS. NORRIS: And that extraction report categorizes different things — for example, puts all the call logs in one section, all of the text messages in one section, and so forth?
MARCIA RODRIGUEZ: Yes, ma'am, it categorizes it.
MS. NORRIS: And you can also pull out the contact list — like if I have phone numbers saved in my phone, like my husband or my mother, it would show up the contact name and then the phone number associated with that contact.
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: However it is entered in the phone?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: May I approach, Your Honor?
JUDGE HANKINSON: You bet.
MS. NORRIS: I'm — I'm showing you a previous decision by the County Council on identification of State's Exhibit 126. Do you recognize what that item is?
MARCIA RODRIGUEZ: Yes, ma'am, this is the disc that I placed the report on that I created, the Cellebrite report for Ms. Adelson's phone.
MS. NORRIS: In the iPhone?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: You didn't make any changes to it?
MARCIA RODRIGUEZ: No, ma'am.
MS. NORRIS: And do you recognize that disc that we put on top?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: Your Honor, at this time I'd offer State's exhibit 126.
JUDGE HANKINSON: Is there objection?
MR. DECOSTE: Yes, Your Honor. Sidebar?
JUDGE HANKINSON: Okay.
JUDGE HANKINSON: I believe the correct numbers are 70, 71, 72, and 74, over objection. Do I have the numbers correct, Ms. Norris?
MS. NORRIS: Yes, they are 70, 71, 72, and 74.
MS. NORRIS: Okay, I probably need to get the witness to identify those items.
JUDGE HANKINSON: You may.
MS. NORRIS: First, State's Exhibit 70 — what is contained in this particular exhibit?
MARCIA RODRIGUEZ: It looks like two different contacts from the report that I created.
MARCIA RODRIGUEZ: So these are from the Cellebrite extraction of Wendi Adelson's phone. These are her contacts, who she has listed and stored in her phone.
MARCIA RODRIGUEZ: These were the contacts, yes — a sampling of the contacts that were in the phone.
MS. NORRIS: And contacts for whom, if you could just —
MARCIA RODRIGUEZ: Looks like Charlie and Dad's cell.
MARCIA RODRIGUEZ: This appears to be another contact extraction for Mom's cell.
MS. NORRIS: And do each of those three contacts — Mom's cell, Dad's cell, and Charlie — have photographs that are associated with the contact's name and phone number?
MARCIA RODRIGUEZ: Yes, ma'am, they do.
MS. NORRIS: Next, I want to ask you about State's Exhibit 71.
MS. NORRIS: Does this exhibit contain a phone number of interest?
MARCIA RODRIGUEZ: It appears to be a page from the contacts. I don't know specifically.
MS. NORRIS: Does it contain a contact name and phone number associated with that name for a garbled?
MARCIA RODRIGUEZ: Yes, ma'am, it does.
MS. NORRIS: In State's 72, what is contained in that?
MARCIA RODRIGUEZ: This is part of the report that I created.
MARCIA RODRIGUEZ: It's the beginning of the call logs section of the report.
MS. NORRIS: And do those contain the call logs from Wendi Adelson's phone on or about July 18, 2014 — 2014 and previous?
MARCIA RODRIGUEZ: Yes, ma'am, it does.
MS. NORRIS: That's not every call ever from her phone — just a sample?
MARCIA RODRIGUEZ: Yes, ma'am, just a sample.
MS. NORRIS: And then finally, in State's — it's 74 what's contained in that document?
MARCIA RODRIGUEZ: This is also a part of the report that I created.
MARCIA RODRIGUEZ: It's showing a sampling of the voicemails that were taken from the phone.
MS. NORRIS: And again, and everything that's on that — July 16, 2014 to July 18, 2014?
MARCIA RODRIGUEZ: Yes, ma'am.
MS. NORRIS: And on any of these exhibits, has anything been deleted or removed or taken away?
MARCIA RODRIGUEZ: No, ma'am.
MS. NORRIS: I'm not sure if I asked you this yet, but when you do the extraction, the Cellebrite extraction report, does it tell you the phone number for the phone you're extracting data from?
MARCIA RODRIGUEZ: This report did.
MARCIA RODRIGUEZ: The extraction listed the phone number for the phone that I extracted, this Apple iPhone, as 954-803-0079.
MS. NORRIS: All right. Thank you, Investigator Rodriguez. I don't have any more questions.
MARCIA RODRIGUEZ: Yes, ma'am.
JUDGE HANKINSON: Cross. Garcia.
MR. ZANGENEH: Yes, sir.
MR. ZANGENEH: Good afternoon, Investigator. How are you?
MARCIA RODRIGUEZ: Good afternoon. I'm well, thank you.
MR. ZANGENEH: One of the points that you were discussing during your discussions with the government was that you were concerned when you transferred the data that you don't want to manipulate any of the photos or any of the data, correct?
MARCIA RODRIGUEZ: That's correct.
MR. ZANGENEH: And that's because the original photographs or videos, you don't want them to be manipulated or altered, correct?
MARCIA RODRIGUEZ: Yes, sir.
MR. ZANGENEH: Thank you.
JUDGE HANKINSON: Magbanua.
MR. ZANGENEH: No cross, Your Honor.
JUDGE HANKINSON: Any redirect?
MS. NORRIS: No, Your Honor. Alright, any juror have a question of this witness? You may step down. Do we need to keep her further?
MR. ZANGENEH: No, judge, not for Mr. Garcia.
MR. DECOSTE: Not for Ms. Magbanua, Your Honor.
MS. NORRIS: I would like to keep her under subpoena but she can go about her business.
JUDGE HANKINSON: You remain under the rule of sequestration, Investigator.
JUDGE HANKINSON: It would be a good time to break.
JUDGE HANKINSON: I think we have a brief witness be here momentarily. Stand up for just a minute. I misunderstood. I thought they had said we have run out of witnesses. We'll have just one brief witness before we break.