Civil Action No. SA-08-CV-0175 XR
United States District Court, W.D. Texas, San Antonio Division
March 17, 2008
Karen Ann Monsen, Jackson Walker, L.L.P., San Antonio, TX, Stacy Allen, Jackson Walker, L.L.P., Austin, TX, for Plaintiff.
ORDER GRANTING MOTION FOR EXPEDITED COMPUTER FORENSIC IMAGING
*1 The matter before the Court is plaintiffs motion for expedited computer forensic imaging (docket entry 4) which was referred to the undersigned for determination. A hearing was held on the motion on this date. After hearing the arguments of counsel and considering the motion and supporting materials, I find and it is ORDERED that:
1. Regardless of whether plaintiff has stated a claim for relief under the Copyright Act, the claim plead under 15 U.S.C. 1125 (para. 181 of the Complaint) sufficiently confers subject matter jurisdiction on this Court.
2. For the reasons stated on the record at the hearing this date, plaintiff has shown good cause for the requested expedited computer imaging under Federal Rule of Civil Procedure 26(d).
3. The motion is GRANTED and expedited forensic imaging shall take place as follows:
A. The Forensic Examiner's costs shall be borne by the Plaintiff.
B. Computer forensic analysis will be performed by Digitalworks, located at 13333 N. Central Expy., Ste. 201, Dallas, Texas 75243 (the “Forensic Examiner”).
C. All Forensic Examiners utilized must agree in writing to be bound by the terms of this Order prior to the commencement of their services.
D. Within two days of this Order or at such other time agreed to by the parties, defendants shall make its Computer(s), Server(s), and any other electronic storage devices located at Defendants' place of business at 1385 Westpark Way, Euless, Texas, including but not limited to Brett Wassell's laptop, which may be located at a different location, available to the Forensic Examiner to make mirror images of those devices as set out below:
a. Imaging of the Computer(s), Server(s), any other electronic storage devices in Defendants' possession, custody, or control, and Brett Wassell's laptop shall be created using Encase or a similar hardware or software tool that creates a forensically sound, bit-for-bit, mirror image of the original hard drives. A bit-stream mirror image copy of the media item(s) will be captured and will include all file slack and unallocated space.
b. Defendants' Computers may include, but are not limited to, computers named CLASSROOM, BRETTSTOSHIBA, XPEL, XPEL98, OEMCOMPUTER, and SYSTEMAX. This Order does not limit imaging to one server if Defendants possess or have custody or control of additional servers, each of which shall be imaged pursuant to this Order.
c. All images and copies of images shall be authenticated by generating an MD5 hash value verification for comparison to the original hard drive.
d. The forensic images shall be copied and retained by the Forensic Examiner until such time the court or both parties request the destruction of the forensic image files.
E. The Forensic Examiner will maintain all mirrored images and do so in the strictest confidence, and not disclose any information obtained to unauthorized persons.
F. The Forensic Examiner will use its best efforts to avoid unnecessarily disrupting the normal activities or business operations of the defendants while inspecting, copying, and imaging the computers and storage devices.
End of Document.