Tag: criminal trial

Crime Scene Do Not Enter Photo
Criminal JusticeCriminal Law

A Review of the Alex Murdaugh Trial

On March 2nd, 2023, Alex Murdaugh was convicted of killing his wife, Maggie Murdaugh, and 22-year-old son, Paul Murdaugh, at their Moselle home in South Carolina’s Lowcountry. Murdaugh was once a name with an untouchable reputation due to their affluence and connections to the South Carolina justice system for nearly a century. Now, their prestigious image and legal reign have withered. While the trial may have been the straw that broke the camel’s back for the Murdaugh’s, sickeningly, this tragedy was not the only crime allegedly related to the family. Below is a convoluted timeline of the events leading up to the trial, and a summary of the trial itself.

Welcome to South Carolina sign.

Timeline of Events (FOX News, Inside Edition, CNN)

January 2006: Randolph Murdaugh III relinquished his role as a prosecutor responsible for overseeing five counties in South Carolina’s 14th circuit district: Allendale, Colleton, Hampton, Beaufort, and Jasper. His son, Alex Murdaugh, volunteered at the solicitor’s office while simultaneously continuing his partnership with Peters, Murdaugh, Parker, Eltzroth & Detrick, a prominent personal injury law firm.

July 8th, 2015: 19-year-old Stephen Smith, a former classmate of Alex’s oldest son, Buster Murdaugh, was found dead in the middle of a road. South Carolina Highway Patrol investigated the scene and discovered Stephen’s car was out of gas, which was a mistake that occurred frequently, and the tank was open. It ultimately declared the incident to be a hit-and-run and had an autopsy to confirm the determination. However, the car was approximately three miles from Stephen’s body, he suffered severe head trauma, and he had injuries on his left arm. To add, Stephen’s family thought it was off that he did not call them for help, which was normal practice if he was stranded. The listed observations made Chief Billy Jarrell think the incident may have been a homicide.

In December, the South Carolina Law Enforcement Division (SLED) received an anonymous tip revealing Paul and Buster as potential persons of interest. While there were rumors of Buster and Stephen having a secret affair, neither of the brothers were named suspects in the incident and it remains unsolved.

February 26th, 2018: Gloria Satterfield, the Murdaugh family’s housekeeper, allegedly died from tripping over a set of stairs at the Moselle property. Her family issued a wrongful death claim ten months later but never received the money.

February 24th, 2019: Paul, who was underage, drunkenly crashed his father’s boat into a bridge in Beaufort, resulting in the death of 19-year-old Mallory Beach, whose body was found a week later. The incident also injured four other friends. It was reported that he had a blood alcohol level three times the legal limit. Paul was later charged with three felony counts of boating under the influence causing injury or death and was released on a $50,000 personal recognizance bond. A trial did not occur due to his murder.

April 2021: Maggie Murdaugh allegedly met with a divorce attorney for a consultation.

June 7th, 2021: The Moselle Murders occurred.

  • Between 9:00-9:30 P.M., Paul and Maggie Murdaugh were fatally shot outside of their family hunting property. Two different guns were fired: a shotgun was used on Paul, and Maggie was shot with an assault rifle (Daily Mail).
  • At 10:07 P.M., Alex Murdaugh hysterically dials 911 reporting he discovered Paul and Maggie’s bodies near the dog kennels. In his first statement to a deputy who arrived at the scene, Alex stated Paul was receiving online threats for his involvement in the boating accident.
  • At 11:47 P.M., SLED officers became the lead investigators of the case.

June 23rd, 2021: Considering new details regarding the Murdaugh murders, SLED reopened the cold case of Stephen Smith’s murder in 2015.

September 2021: A series of events took place.

  • September 4th: Alex reported to 911 that he was shot in the head by a gunman passing by in a truck while he was changing a tire on the roadside. Evidently, the incident happened near the Moselle crime scene. Later that day he announces his recusal from the family practice and attends rehab for a twenty-year-long opioid addiction.
  • September 6th: Murdaugh’s law firm explained his embezzlement of the firm’s finances was the basis of Alex’s departure. The partners came to this conclusion after working with a forensic accounting firm.
  • September 15th: Alex admitted to staging his own shooting as an effort to give his son Buster a $10 million life insurance policy since the money would not be provided if his death was caused by suicide. He hired a friend named Curtis Smith, aka “Cousin Eddie.”
  • September 16th: To direct law enforcement to focus on Paul and Maggie’s murders, Alex admitted to the orchestration of his roadside shooting and turned himself in after an arrest warrant for alleged insurance fraud was released.
  • September 20th: Connor Cook, a former friend of Paul, filed a lawsuit against Alex claiming he was scheming to blame Connor for the 2019 boat crash.

October 2021: Another series of events happened.

  • October 6th: Gloria Satterfield’s sons filed a lawsuit against Alex stating he misused the death settlement money. They never received any of the $4.3 million that was owed.
  • October 9th: Alex was arrested from rehab for falsely acquiring property which stemmed from Gloria Satterfield’s wrongful death settlement.
  • October 13th: Alex has been announced as a person of interest for Paul and Maggie’s murder.

From this time up until December 2022, Murdaugh has been charged with the death of his wife and son. He was also charged with nearly 100 fraud, criminal conspiracy, and drug charges for potentially running a drug ring in Colleton Country with Curtis Smith (2013-2021). SLED also announced its exhumation of Gloria Satterfield’s body, which is an ongoing investigation. Stephen Smith’s case is also ongoing, but additional information has not been made public.

Courtroom Testimony.

Trial: The State of South Carolina v. Richard Alexander Murdaugh (FOX News, Inside Edition)

The six-week trial began on January 23rd, 2023, and ended on March 2nd, 2023.

Week 1 Insight: Prosecutor Creighton Waters brought Sgt. Daniel Greene, who was at the crime scene on June 7th, 2021, to the stand. Despite Murdaugh telling law enforcement he checked for pulses on the bodies, Greene told the court Murdaugh lacked blood on his clothes and hands, and tears in his eyes.

Jurors learn the timeline of what occurred in June. Videotaped interviews reveal Alex drove around the Moselle property with Paul and ate dinner with Paul and Maggie afterward. This dinner was the final time Alex saw his wife and son. Maggie went to the dog kennels, which was a quarter mile from the house, and Paul left without stating his location. Alex took a twenty-minute nap with the TV on. He wakes up and sends Maggie texts and phone calls, only to not receive a response. A few minutes past 9 P.M., he visited his mom who suffers from Alzheimer’s at her home 20 minutes away from Moselle. Alex came home, saw the house was empty, and drove to the dog kennels to look for Maggie. He discovered the tragic scene and dialed 911 at 10:07 P.M.

Week 2 Insight: A debate between the prosecution and defense ensued over Alex’s pronoun use in a videotaped interview with SLED. Here is the following statement of contention: “It’s just so bad. I did him so bad.” The prosecution believes Alex said “I,” meaning he had inadvertently confessed, whereas the defense believed he said, “they.”

The prosecution presents the court with a pivotal piece of evidence: a Snapchat video. Paul recorded a video via Snapchat at 8:44 p.m. placing him at the dog kennels. Prosecutors said he was murdered three minutes after. There were two other voices other than Paul’s recorded in the video. Paul’s friends, Will Loving and Rogan Gibson, confirmed the male voice belonged to Alex. This confirms Alex was at the crime scene minutes before the murders despite him saying he arrived around 10 P.M. when they were murdered.

A second Snapchat video was filmed an hour before the previously mentioned Snapchat video. It portrayed Alex in a completely different outfit than what he was wearing when law enforcement arrived at the scene.

Week 3 Insight: A bomb threat was called in and caused the courtroom to evacuate. After it was proven a hoax and everyone returned inside, jurors listened to extensive accounts about Alex’s alleged financial misdeeds. They also learned Shelley Smith, Alex’s mother’s caretaker, was pressured to say he visited his mother for at least forty-five minutes. He was only there for twenty minutes. The Murdaugh’s current housekeeper also took the stand. She said Alex told her to say he wore a different shirt the day of the murders.

Week 4 Insight: Before the prosecution rested their case, Marian Proctor, Maggie’s older sister, announced to the jury Alex told Maggie and Paul to come to the Moselle property despite not wanting to go. She also alluded to Maggie’s happiness with Alex despite the imperfect marriage.

Dr. Ellen Reimer, the pathologist who performed Paul and Maggie’s autopsies, testified against the defense’s theory of how the deaths occurred (Law and Crime Network). She suggested their proposed theory would have left more damage to the bodies than what appeared.

The final witness brought to the stand was special agent Peter Rudolfski, who revealed additional information regarding the timeline of the June 7th murders. At 10:05:57 P.M., Alex arrived at the dog kennels. At 10:06:14 P.M., less than 20 seconds later, he phoned 911. Alex told the dispatcher he checked for Maggie and Paul’s pulses, whose bodies were 30 feet apart from each other. Paul’s knowledge of his father’s drug addiction, and his confrontation with Alex about the issue, were brought to light as well.

Week 5 Insight: Buster Murdaugh was a witness for the defense and testified he drove over to the Moselle property after his phone call with Alex regarding the brutal death of his mother and brother. During his testimony, the defense plays the controversial video that sparked debate three weeks ago. Buster said Alex used the “they” pronoun as opposed to “I.”

This is also the week Alex took the stand in his own trial. He admitted to lying to friends, family, and investigators about being at the dog kennels with his wife and son minutes before the time prosecutors said they were murdered. Despite having a bag of opioids on him that night, he told the court his drug addiction caused paranoia and stated his distrust of the investigators.

Week 6 Insight: After listening to the closing arguments, the jury deliberated for less than three hours and ultimately delivered a guilty verdict. Alex Murdaugh was sentenced to two consecutive life sentences without parole on March 3rd, 2023.

CNN reports the confirmation from Alex’s defense team that they will be appealing the sentencing for Paul and Maggie’s murders. The trial may have ended, but it certainly will not be the last time Murdaugh enters a courtroom. CNN states prosecutor Creighton Waters will pursue Murdaugh’s plethora of financial, conspiracy, and forgery charges.

Computer ForensicsDemonstrative EvidenceEvidenceSexual AbuseUncategorized

The Jeffrey Epstein Trial: Expert Witness Commentary on eDiscovery and Forensics

Last week, The Daily Beast reported the Jeffrey Epstein criminal trial will have a million pages of evidence, which will include materials seized from several devices.

A million pages of evidence makes for a great headline. It feels overwhelming! However, after reading the article from The Daily Beast, I began to wonder if a million pages of evidence is a lot or a little? How many files are stored on a standard laptop or cell phone? How will the prosecution and defense identify those files admitted into evidence? These questions, obviously, got me thinking about digital forensics and eDiscovery issues present in the Epstein sex abuse trial.

Now, if you read the blog post from last week, you’re probably wondering if I’m going to constantly write about sex abuse issues. The answer is, no. However, when these topics fill our news and I have the ability to reach out to qualified expert witnesses to provide insights on issues of public import, I’m going to do so.

As of this writing, the Florida Governor has ordered a state criminal probe into the handling of the 2008 Jeffrey Epstein investigation. This new probe was reported by The Miami Herald, yesterday afternoon. Some credit for Epstein’s current predicament, is due to the “Perversion of Justice” exposé series, from Miami Herald reporter Julie K. Brown. She detailed the 2008 sex trafficking investigation and settlement. The series is worth a read!

Now, back to the million documents of evidence. I’ve been working with digital and ediscovery experts for nearly 10 years. That said, I’m a novice on their areas of expertise. I’m able to issue spot when an attorney needs a particular type of expert. With that said, I posed some foundational questions to one of our members.

Questions & Answers for expert witness C. Matthew Curtin, CISSP:

C. Matthew Curtin, CISSP, founder and CEO of Interhack Corp., is a Certified Information Systems Security Professional. An expert in computers and information technology, Mr. Curtin and his team at Interhack help attorneys and executives use data and computer technology in high-stakes situations.

NR: According to The Daily Beast article, the Epstein trial will have more than 1 million pages of evidence, found on multiple devices. How will the prosecution and defense retrieve all of these documents and collate them into usable evidence?

CMC: One million pages of computer evidence is no big deal. Consider that in a typical computer system you’re looking at anywhere from 100,000-500,000 files, including all of the software, operating system, and user data. By the time you get through to the things being used by the prosecution and defense as evidence, the vast majority has been thrown out, but if you’ve got a phone or two, a couple of computers, and a few online services, it’s pretty easy to get into those numbers. Ultimately it depends on how they’re counting, of course: Are these bates numbered pages for presentation, or are they the raw input? If these are the results that are turned into exhibits and so on, that’s pretty big but not huge.

NR: What is the process for identifying the usable documents from those that are unrelated to a litigation?

CMC: Finding relevant documents and conducting a forensic examination are two fundamentally different processes. Finding relevant documents is typically a matter of “indexing” (reading the files for their contents) and then making “queries” of the “index” to return the documents and pages that are responsive to the search. Typically an attorney will then look at the responses and make a decision as to whether something is material. It’s basic data processing: data in, data out for a lawyer to use.

In the case of a forensic examination, the raw data will be subjected to various tests and analysis, ultimately resulting in reports that will be submitted as evidence. For a phone, a complete “extraction report” can easily produce a 5,000 page PDF document, and many get much, much larger. In any case, all of these things will wind up going into some kind of expert report that will outline opinions and findings that might be challenged and should be subjected to scrutiny. This is expert data analysis, where the data processing is performed to be consumed by an expert to form a technical opinion or finding.

NR: How much time would it take a forensics expert to comb through multiple devices to determine which documents are appropriate for discovery and evidentiary purposes?

CMC: Methodology and the size of the source matter for how long it takes. Generally speaking, I tell people to figure that to run through a forensic image of a raw computer hard drive and prepare it for human review, you’re looking at three days if you want to recover deleted files, compute the mathematical “hash” values that allow us to distinguish among files, and so on. A human will then need to go through the results and that can take anywhere from another day to another week or more, depending on what’s found, and how much work needs to be done without automated tools to manage the process. In some cases, no one cares about deleted files. In other cases, they’re critical. The only rule of thumb that applies generally is that the time it takes to do the job is between two and eight times what a lawyer thinks it should take.

NR: Is a million documents a lot of digital documents for a trial? Or is that common when dealing with digital files?

CMC: I addressed this a bit in my first answer, but one million computer files isn’t a big deal.

NR: I’m sure many of my questions are rudimentary, please feel free to provide any additional information you think the public should know about digital forensics and e-discovery in this type of matter…

CMC: Something to add: when conducting forensic examination, we often see a law-enforcement view put forth: Suspect that X happened, so go search for evidence of X. Fail to find X, and you add “tampering” to the list of charges. The reality is, though, that it isn’t sound scientific process to go in search of confirmation of what you think is already happening. Various cognitive biases interplay to create serious problems with the results extracted this way. Far better to construct tests to look for the “null hypotheses,” the things that would disprove what you think is happening. At the very least, alternate theories of the case deserve exploration and there are plenty of cases that would not take the time and money put into them if they were given greater scrutiny.

For example, if someone is suspected of having illegal pornography on a computer—that is, possessing the material, knowing the character of its content—law enforcement will typically reconstruct deleted files, look at thumbnail image databases, and loose files found in caches and elsewhere on the disk managed by the computer operating system rather than the user directly. If they find material that looks like what they thought was there, in many places a prosecutor will go forward with charges. On the other hand, what if someone did get the files and not mean to have them? What other course would there be but to delete the material? If the material has been deleted, why would it be brought up in a prosecution? There are cases where it can be relevant to a legitimate legal question but we’re only in the last few years starting to see some sophistication in consuming these results and moving forward sensibly with discretion informed by understanding.


A huge thanks to C. Matthew Curtin for taking time to provide us with these excellent answers. Please check out his company at http://web.interhack.com/.