Republic of the Philippines
NATIONAL POLICE COMMISSION
PHILIPPINE NATIONAL POLICE
MISAMIS ORIENTAL POLICE PROVINCIAL OFFICE
OPOL MUNICIPAL POLICE STATION
Opol, Misamis Oriental
MEMORANDUM
FOR : Regional Anti-Cybercrime Unit 10 (RACU 10)
(Attn: C, ATCCD)
FROM : Chief of Police
SUBJECT : Request for Digital Forensic Examination
DATE : 08 November 2022
1. References: Spot Report dated 08 November 2022 with subject Theft.
2. Request that Anti-Transnational and Cyber Crime Division (ATCCD),
CIDG conduct digital forensic examination on the accompanying specimen specifically
describe on the attached Digital Forensic Examination Request Form.
3. Background of the case with the following information:
a) NATURE OF CASE : THEFT
b) VICTIM : JOEL ORTIGOZA JR
c) SUSPECT : FATIMAH EHLIAS y
HENERAL, 25 years old,
widower and a resident of Area
4, Gonsongan, Saguiran, LDS
ASMINAH MATOK y AMPUAN,
30 years old, a resident of Area
4, Gonsongan, Saguiran, LDS
d) TDPO : AT AROUND 11:40 PM OF
NOVEMBER 8, 2022
4. Facts of the Case:
At about 12:30 PM of November 8, 2022, Opol MPS
personnel Pat Jesrel Escartin and Pat Victor Yana responded to
call for police assistance concerning on a theft incident at
Quickstep Grocery Store, Zone 1, Poblacion, Opol, Misamis
Oriental where a female suspect was placed under restraint by the
workers of the said store.
Responding PNP personnel arrived at the scene and
reviewed the CCTV footage of the said store and it revealed that
said female suspect identified as FATIMAH EHLIAS y HENERAL,
25 years old, widower and a resident of Area 4, Gonsongan,
Saguiran together with another female suspect who was identified
as ASMINAH MATOK y AMPUAN, 30 years old, a resident of
same place acted in connivance as they serve as lookout for each
other while taking several packs of 900 grams Bear Brand Milk
and concealed them in their bodies using their clothes.
Upon being noticed by the workers of the said store that
they were acting suspicious, one of them (ASMINAH MATOK y
AMPUAN) was able to get away bringing with her the stolen goods
(8 packs 900 grams bear brand worth around 2,400 Php) while
the other remained inside the store and was able to return the
goods to the display area of the said store after she noticed she
was being suspected of stealing goods but she was not allowed to
go out from the store.
Responding personnel arrested remaining suspect and she
is now placed under the custody of this office while her accomplice
is now at-large.
5. Herewith is/are the required storage media necessary for the digital
forensic examination:
Submitted Digital Media Required Storage Media
for Examination
CCTV SYSTEM AT SITE
6. The bearer of this request is Pat Jesrel Escaertin.
Note:
a. (For cases from Region 3, 4a, and NCR must be delivered
personally by the investigator-on case.),
b. (For cases from other Regions preferably delivered by
investigator-on case or official Liaison Officer.)
7. Further request that this Office be furnished a copy of the ATCCD digital
forensic examination result for our reference.
MICHAEL SALVADOR R LACASAN
Police Major
Republic of the Philippines
Department of the Interior and Local Government
National Police Commission
PHILIPPINE NATIONAL POLICE
CRIMINAL INVESTIGATION AND DETECTION GROUP
ANTI-TRANSNATIONAL AND CYBER CRIME DIVISION
Camp Crame, Quezon City
DIGITAL FORENSICS EXAMINATION REQUEST FORM
SECTION I: TYPE OF REQUEST
A. Request For:
Lab: ██On-site Technical Assistance Training
Others: __________________________________
B. Mode of Request:
██ Initial (Original agency investigation) Follow-up (Prosecutor follow-up request)
Others:__________________________________
SECTION II: CASE INFORMATION
A. Submitting Agency: B. Date: C. Time:
OPOL MPS NOVEMBER 8, 2022 AT AROUND 11:40
PM
D. Agency Address:
ZONE 1, POBLACION, OPOL, MISAMIS ORIENTAL
E. Agency Case Number: F. Nature of the Crime/s:
THEFT
G. Legal Authority: Note:
Provide a copy of the Search Warrant,
Search Warrant
Affidavit, Written Consent, Consent
Court Order
Acknowledgement Form, and Synopsis of the
██ Consent to Search
case or other Documentation.
Others* _________________
H. Investigators Name: (last, first) I. Cellphone Number: J. Office Number:
PSSg Marc Arthur Reyes 09353019364 09358056370
K. Investigators Email: L. Is Investigator ISDE Trained?
[email protected] Yes ██ No
SECTION III: COURT/SUSPECT/S INFORMATION
A. Prosecutor Assigned: (last, first) Mm B. Phone Number: C. Email Address:
D. Suspect/s Name: (last, first) E. In custody/Detained:
FATIMAH EHLIAS y
HENERAL, 25 years old, widower and a ██ Yes No
resident of Area 4, Gonsongan, Saguiran,
LDS
ASMINAH MATOK y AMPUAN, 30 years M
old, a resident of Area 4, Gonsongan,
Saguiran, LDS
SECTION IV: EVIDENCE INFORMATION
A. Search/Seized/ Date: B. Time: C. Location:
NOVEMBER 8, 2022 AT ABOUT D. Z-1, POBLACION,
11:40 AM OPOL,MISOR
OF
D. Items to be Examined: CCTV
SYSTEM
Description
Item #: Type of Items/Media Serial Numbers
(make & model)
E. Has anyone viewed/examined/accessed this evidence prior to submission?
██ Yes No
F. List any Digital Forensic Lab members consulted:
G. Special Handling: (check all that apply) *
Bio Hazard Classified Material Drug Related ██ National Interest
Suspected Terrorism Others:______________________
SECTION V: SERVICES REQUESTED
- Describe in detail services requested and provide detailed keywords, nature of the case, and
victim/suspect information. Identify any investigative and/ or court deadlines.
- Explain all checked items with “ * ” from above.
Please identify the types of evidence/information to be searched for/ recovered:
Financial Records Word Processing /Text (Other/Keywords – Please be specific)
Documents ██ CCTV FOOTAGES
* Internet History and Credit Card info/Check-
log files writing programs
*Email/IM/Text Child Pornography
Messages
Contact Lists Images
Call History Owner Information
* Clarification and comments
If child pornography images are found during the course of an examination, the examiner will:
1. Use a hard drive duplicator from the Digital Forensic Lab to duplicate the original hard drive.
2. Replace the original drive with a duplicate hard drive of equal or greater size.
3. Remove all child pornography from the duplicate hard drive (which will remain on-site or will be
returned to the victim/suspect (when required to do so)).
4. Maintain the original hard drive and image in the Digital Forensic Lab for analysis.
SECTION VI: REQUESTING INVESTIGATOR /INVESTIGATOR ON CASE
A. Rank / Name /Title: B. Signature:
PSSg MARC ARTHUR REYES
SECTION VII: DIGITAL FORENSIC LAB USE ONLY
A. Lab Case #:
Process Rank/Name Signature Time/Date
E. Received by
F. Assigned by
G. Assigned to
H. Priority
Imaging Examination/Analysis Report Submitted
I. Lab Case Status Archived Pulled out
Remarks:_____________________________________________________
