LPD
Case
Number;
C3-1
07311
IN
THE
COUNTY
COURT
OF
LANCASTER
COUNTY,
NEBRASKA
IN
THE
MATTER
OF
THE
SEARCH
WARRANT
OF
THE
DESCRIBED
PREMISES
OF
THE
LINCOLN
POLICE
DEPARTMENT
575
SOUTH
10TH
STREET
LINCOLN,
LANCASTER
COUNTY,
NEBRASKA
SEARCH
WARRANT
RETURN
STATE
OF
NEBRASKA
)
)
SS.
COUNTY
OF
LANCASTER
)
The
undersigned
states
that
he
received
the
Search
Warrant
issued
herein
on
the
27th
day
of
December,
2023,
and
that
he
executed
the
same
on
the
Sth
day
of
January,
2024,
by
seizing
the
property
described
in
the
Inventory
filed
herein
and
by
delivering
a
copy
of
the
Search
Warrant
for
the
said
property
at
the
place
from
which
the
property
is
taken.
day
of
SUBSCRIBED
to
in
my
presence
and
sworn
to
before
me
this
____
20^.
ry
Q
GENERAL
NOTARY
-
State
of
Nebraska
,
LAURA
M.
ALLEN
Ba
My
Comm,
fap.
Aug.
3,2026
002162695D02
002162695D02
Warrant
Return
&
Inventory
Page
1
INVENTORY
—
o
IN
THE
COUNTY
COURT
OF
LANCASTER
COUNTY,
NEBRASKA^;
IN
THE
MATTER
OF
THE
SEARCH
WARRANT
OF
THE
DESCRIBED
PREMISES
OF
o
m
-□
THE
LINCOLN
POLICE
DEPARTMENT
c
x
575
SOUTH
10TH
STREET
LINCOLN,
LANCASTER
COUNTY,
NEBRASKA
-j
LANCASTER
COUNTY
STATE
OF
NEBRASKA
)
)
SS.
COUNTY
OF
LANCASTER
)
INVENTORY
OF
PROPERTY
SEIZED
BY
VIRTUE
OF
THE
SEARCH
WARRANT
ISSUED
HEREIN
COREY
L.
WEINMASTER
#883,
being
first
duly
sworn
on
oath,
deposes
and
says
the
following
is
an
inventory
of
the
property
seized
by
virtue
of
the
Search
Warrant
issued
herein:
The
following
is
a
list
of
the
items
seized
and
removed
as
evidence
during
the
execution
of
a
search
warrant
at
the
premise
of
the
Lincoln
Police
Department,
575
South
10th
Street,
Lincoln,
Lancaster
County,
Nebraska.
Laptop
computer
under
LPD
Property
Q2327819
-
526
.E01
Image
files
Inventory
made
in
the
presence
of
DEREK
DITTMAN
#1551.
SUBSCRIBED
to
in
my
presence
and
sworn
to
before
me
this
M
~
day
of
oGxiiAO-ivLlXUxn
Notary
Public
__________________
,GENBWL
NOTARY-Stab
ofNetvaska
[
LAURA
M.
ALLEN
BRg
MyCotm
Exp.
Aug.
3,
MM
Warrant
Return
&
Inventory
Page
2
RECEIPT
OF
SEIZED
ITEMS
The
following
is
a
list
of
the
items
seized
and
removed
as
evidence
during
the
execution
of
a
search
warrant
at
the
premise
of
the
Lincoln
Police
Department,
575
South
10''^
Street,
Lincoln,
Lancaster
County,
Nebraska.
Laptop
computer
under
LPD
Property
Q2327819
-
526
.EOl
Image
files
LANCASTER
COUNTY
2Q2UAN-9
PM
3=57
CLERK
OF
THE
d is t r ic t
c o u r t
1
IN
THE
COUNTY
OF
LANCASTER
COUNTY,
NEBRASKA
STATE
OF
NEBRASKA
COUNTY
OF
LANCASTER
)
)
SS.
SEARCH
WARRANT
)
TO:
Robert
Norton,
a
Investigator
with
the
Lincoln
Police
Department
Special
Victims
Unit,
Lancaster
County,
Nebraska,
and
any
and
all
law
enforcement
officers.
WHEREAS,
Robert
Norton
has
filed
an
Affidavit
before
the
undersigned
Judge
of
the
County
Court
of
Lancaster
County,
Nebraska,
and
said
written
Affidavit,
having
been
duly
considered,
the
court
finds
that
the
facts
set
forth
in
said
Affidavit
are
true,
and
that
those
facts
do
constitute
grounds
and
probable
cause
for
the
issuance
of
a
Search
Warrant.
THEREFORE,
you
are
commanded
to
search
the
places(s)
listed
in
Attachment
A
to
seize
the
listed
property,
as
well
as
search
the
property
for
the
digital
evidence
listed
in
Attachment
B.
This
search
warrant
shall
be
executed
and
returned
within
ten
(10)
days
to
a
Clerk
of
the
Lancaster
District
Court,
Nebraska.
In
the
event
records
are
not
received
from
the
Service
Provider
within
ten
(10)
days,
your
Affiant
requests
authorization
to
returned
the
search
warrant
within
ten
(10)
days
of
receipt
of
the
records.
Printed
Name
of
Judge
Given
under
my
hand
and
seal
this
27*'
’
day
of
December
2(^2
Jiidge
oTtl^jUmiiity
Court
UJ
C3-1
073
I
I
Order
Page
I
of
I
Revised
10-27-2023
AllACnVlEMA
Property
to
Be
Searehed
This
warrant
is
directed
to
seize
and
search
the
following;
•
An
unknown
brand
laptop
computer
located
in
the
Lincoln
Police
Property
Evidence
Unit
at
575
South
10''
’
Street,
Lincoln,
Lancaster
County,
NE,
labeled
with
Property
Number
Q2327819
and
Case
Number
C3-
107311.
C3-I()73l
I
Ailachmeiit
A
Page
I
of
I
Revised
1
0-11-2023
ATTACHMENT
B
Particular
Things
to
be
Seized
'To
the-extent
that
the
information
described
in
Attachment
A
is
within
the
possession,
custody,
or
control
of
the
Lincoln
Police
Department
it
is
requested
to
search
for
and
seize
the
following
records
for
each
item
listed
in
Attachment
A
to
include
including
any
live
and/or
deleted
data
for
the
time
frame
of
September
28,
2016
at
0001
hours
CST
to
December
1,2023
at
0001
hours
CST,
specifically
for
the
following:
1.
Evidence
of
other
accounts
associated
with
this
device
including
email
addresses,
social
media
accounts,
messaging
"app
”
accounts,
and
other
accounts
that
may
be
accessed
through
the
digital
device
that
will
aid
in
determining
the
possessor/user
of
the
device;
2.
Evidence
of
use
of
the
device
the
above
dates,
to
communicate
with
others
about
the
above-listed
crime(s),
via
email,
chat
sessions,
instant
messages,
text
messages,
app
communications,
social
media,
internet
usage,
and
other
similar
digital
communications;
3.
Photographs,
images,
videos,
documents,
and
related
data
created,
accessed,
read,
modified,
received,
stored,
sent,
moved,
deleted
or
otherwise
manipulated
between
the
above
dates;
4.
Evidence
of
use
of
the
device
to
conduct
internet
searches
relating
to
above-mentioned
crime(s);
5.
Information
that
can
be
used
to
calculate
the
position
of
the
device
between
the
above
dates,
including
location
data;
GPS
satellite
data;
GPS
coordinates
for
routes
and
destination
queries
between
the
above-listed
dates;
"app
”
data
or
usage
information
and
related
location
information;
IP
logs
or
similar
internet
connection
information,
and
images
created,
accessed
or
modified
between
the
above-listed
dates,
together
with
their
metadata
and
EXIF
tags;
6.
Evidence
of
the
identity
of
the
person
in
possession
of
the
device
on
or
about
any
times
that
items
of
evidentiary
value,
located
pursuant
to
this
warrant,
were
created
modified,
accessed
or
otherwise
manipulated.
Such
evidence
may
be
found
in
digital
communications,
photos
and
video
and
associated
metadata,
IP
logs,
documents,
social
media
activity,
and
siriiilar
data;
C.3-l()73l
l
Altiichment
B
Page
I
of
I
Revised
10-11-2023
IN
THE
COUNTY
COURT
OF
LANCASTER
COUNTY,
NEBRASKA
STATE
OF
NEBRASKA
)
)
SS.
AFFIDAVIT
FOR
SEARCH
WARRANT
COUNTY
OF
LANCASTER
)
Robert
Norton,
being
first
duly
sworn
upon
oath
deposes
and
states
that
he
is
an
investigator
for
the
Lincoln
Police
Departments
Special
Victims
Unit,
Lincoln,
Lancaster
County,
Nebraska.
AFFIANT
states
he
is
currently
involved
in
the
investigation
oFa
First-Degree
Sexual
Assault
of
a
Child-
Nebraska
State
Statute
28-319.01,
occurring
at
6201
S.
42
Street,
Lincoln,
Lancaster
County
Nebraska.
AFFIANT
has
reviewed
case
reports
regarding
this
investigation
prepared
by
other
involved
Law
Enforcement
Officers.
Attachments
Attachment
A:
Property
to
be
Searched
Attachment
B;
Particular
Things
to
be
Seized
Affiant
’
s
Background
Your
affiant
has
been
a
police
officer
for
the
Lincoln
Police
Department
since
2002.
Since
2002
Affiant
has
been
investigating
misdemeanor
and
felony
crimes
with
the
Lincoln
Police
Department
to
include
sexual
assault,
human
trafficking,
child
enticement,
and
pornography.
Your
Affiant
has
training
and
experience
in
conducting
criminal
investigations.
This
Affidavit
is
submitted
in
support
of
a
search
warrant.
Since
this
Affidavit
is
being
submitted
for
the
limited
purpose
of
securing
a
search
warrant,
your
Affiant
not
set
forth
every
fact
known
to
me
regarding
this
investigation.
The
statements
contained
in
this
Affidavit
are
based
in
part
on
the
investigation
that
your
Affiant
has
conducted,
and
information
provided
to
your
Affiant
by
other
law
enforcement
officers
verbally,
and
through
written
reports.
Case
Facts
On
December
1,2023,
a
12-year-old
female
identified
hereafter
as
G.F.,
disclosed
to
a
school
counselor
that
her
father,
Brandon
Farrar,
has
been
sexually
assaulting
her
since
she
was
5
years
old.
G.F.
was
C3JO731
1
AITidiivit
Page
I
ol
’
S
Revised
I
1-7-2023
forensically
interviewed
and
described
in
detail
how
her
father
sexually
abused
her
at
their
residence
of
6201
S.
42nd
Street,
Lincoln,
Lancaster
County,
Nebraska.
G.F.
stated
the
abuse
started
when
she
was
5
years
old
and
her
father
asked
her
if
she
could
lick
his
private
or
put
his
private
inside
her
private.
G.F.
reported
there
were
at
least
5
incidents
in
which
her
father
entered
her
bedroom
al
night
while
she
was
sleeping
and
put
his
penis
inside
her
vagina.
After
one
incident
in
September
of
2023,
G.F.
noticed
a
while
cloudy
wel
substance
on
her
bed
sheets.
The
last
sexual
assault
occurred
during
the
early
morning
hours
of
December
1,2023.
On
December
1,2023
at
approx.
1510
hours,
Detective
Messersmith
#1568
and
Investigator
Barry
#1223
with
the
Lincoln
Police
Department's
Special
Victims
Unit
contacted
Brandon
at
his
residence.
Brandon
is
41
years
old
with
a
birthdate
of
February
23,
1982.
Brandon
agreed
to
accompany
investigators
to
the
Lincoln
Police
Department
Headquarters
for
an
.
interview.
Investigator
Barry
#1223
interviewed
Brandon.
The
interview
was
audio/video
recorded.
Brandon
waived
his
Miranda
Rights
and
ultimately
admitted
to
committing
numerous
sexual
acts
on
G.F.
beginning
when
she
was
approximately
8
years
old.
This
includes
approximately
10
to
20
times
in
which
Brandon
would
rub
his
erect
penis
in
between
G.F.'s
labia
and
ejaculate
on
her
stomach
or
bedding;
Brandon
also
admitted
to
digitally
penetrating
G.F.'s
vagina
and
acts
of
cunnilingus
and
fellatio.
Brandon
was
lodged
in
jail.
On
December
7,
2023,
Investigator
Sara
Mueller
#1819
contacted
Katie
Farrar,
Brandon's
wife,
at
the
Child
Advocacy
Center.
During
the
contact,
Katie
told
Investigator
Mueller
that
while
reviewing
Brandon
’
s
laptop
computer
recently,
she
discovered
numerous
images
of
underage
girls
and
screenshots
of
pornography.
Katie
told
Investigator
Mueller
that
she
wanted
to
voluntarily
turn
over
Brandon
’
s
laptop
computer
to
law
enforcement
because
she
believed
the
images
she
viewed
were
pertinent
to
the
investigation
of
Brandon
’
s
sexual
assault
of
G.F.
On
December
15,
2023
at
approximately
1042
hours.
Investigator
Robert
Norton
contacted
Katie
at
her
residence.
Katie
voluntarily
turned
over
Brandon
’
s
laptop
computer
to
Investigator
Norton.
Katie
also
told
Investigator
Norton
that
she
discovered
images
of
unclothed
girls
and
screenshots
of
young
girls
on
Brandon
’
s
laptop
computer.
Investigator
Norton
tagged
Brandon
’
s
laptop
computer
into
the
Lincoln
Police
Department
’
s
Property
&
Evidence
Unit
under
Property
Number
Q2327819.
C3-
1073
I
I
AllKliivii
Page
2
1)1'5
Revised
11-7-2023
Computers
and
Digital
Devices
Evidence
of
the
crimes
described
in
this
application
could
be
contained
in
any
type
of
digital
device.
The
terms
"digital
device"
and
"device"
include
all
devices
capable
of
capturing
and/or
storing
digital
data,
such
as
computers,
digital
cameras,
modems,
routers,
external
memory
drives,
thumb
drives,
cellular
telephones,
GPS
navigation
devices,
etc.
Data
stored
on
digital
devices
and
media
can
be
easily
transferred
from
one
device
or
storage
media
to
another.
Forensic
experts
and
others
with
experience
in
retrieving
and
analyzing
digital
data
have
established
the
following:
Digital
devices
typically
retain
some
evidence
of
all
activity
taken
via
the
device
or
associated
media;
and,
as
such,
could
contain
evidence
of
crime.
For
example,
data,
whether
stored
intentionally
or
unintentionally,
can
contain
evidence
of
knowledge,
intent,
efforts
to
conceal,
sell
or
dispose
of
evidence
or
proceeds
of
criminal
activity,
accomplice
identity,
association
with
victims,
or
geographic
location
of
the
device
possessor
al
particular
dates
and
times.
This
information
can
be
in
numerous
forms,
such
as
photographs;
address
books
or
contact
lists;
or
communications
with
others
through
means
such
as
phone
calls,
email,
instant
messaging,
social
media,
chat
sessions,
or
other
digital
communications.
Evidence
can
remain
on
the
device
or
media
for
indefinite
periods
of
lime
after
the
communication
originally
took
place,
even
if
deleted
by
the
user.
Information
deleted
by
the
user
may
be
recovered
by
a
forensic
examiner
throughout
the
working
life
span
of
the
device.
Digital
data
can
be
found
in
numerous
locations,
and
formats.
Evidence
can
be
embedded
into
unlikely
flies
for
the
type
of
evidence,
such
as
a
photo
included
in
a
document
or
converted
into
a
PDF
Ilie
or
other
format
in
an
effort
to
conceal
their
existence.
Information
on
devices
and
media
can
be
stored
in
random
order;
with
deceptive
file
names;
hidden
from
normal
view;
encrypted
or
password
protected;
and
stored
on
unusual
devices
for
the
type
of
data,
such
as
routers,
printers,
scanners,
game
consoles,
or
other
devices
that
are
similarly
capable
of
storing
digital
data.
Wholly
apart
from
user-generated
flies
and
data,
digital
devices
and
media
typically
store,
often
without
any
conscious
action
by
the
user,
electronic
evidence
pertaining
to
virtually
all
actions
taken
on
the
digital
device,
and
often
information
about
the
geographic
location
at
which
the
device
was
turned
on
and/or
used.
This
data
includes
logs
of
device
use;
records
of
the
creation,
modification,
deletion,
and/or
sending
of
files;
and
uses
of
the
internet,
such
as
uses
of
social
media
websites
and
internet
searches/browsing.
G3-l()731
1
AlTidavii
Page
3
ol'S
Revi.sed
I
1-7-2023
Device-generated
data
also
includes
information
regarding
the
user
identity
at
any
particular
date
and
time;
usage
logs
and
information
pertaining
to
the
physical
location
of
the
device
over
time;
pointers
to
outside
storage
locations,
such
as
cloud
storage,
or
devices
to
which
data
may
have
been
removed,
and
information
about
how
that
offsite
storage
is
being
used.
If
the
device
is
synced
with
other
devices,
it
will
retain
a
record
of
that
action.
Digital
device
users
typically
do
not
erase
or
delete
this
evidence,
because
special
software
or
use
of
special
settings
are
usually
required
for
the
task.
However,
it
is
technically
possible
to
delete
this
information.
Digital
devices
can
also
reveal
clues
to
other
locations
at
which
evidence
may
be
found.
For
e.xample,
digital
devices
often
maintain
logs
of
connected
digital
or
remote
storage
devices.
A
scanner
or
printer
may
store
information
that
would
identify
the
digital
device
with
which
it
was
used.
Forensic
examination
of
the
device
can
often
reveal
those
other
locations
where
evidence
may
be
present.
As
with
other
types
of
evidence,
the
context,
location,
and
data
surrounding
information
in
the
device
data
is
often
necessary
to
understand
whether
evidence
falls
within
the
scope
of
the
warrant.
This
type
of
information
will
be
important
to
the
forensic
examiner's
ability
to
piece
together
and
recognize
evidence
of
the
above-listed
crimes.
Digital
device
programs
frequently
require
passwords,
phrases,
codes,
patterns,
fingerprints,
and/or
user
names
to
operate.
Those
may
be
kept
inside
a
device/media,
or
outside
in
some
other
area
known
to
the
user.
So,
in
addition
to
searching
a
digital
device
and
media
for
evidence
of
the
above-listed
crime(s),
investigators
will
need
to
search
both
the
premises
searched,
and
the
digital
device(s)
for
this
information.
The
forensic
examiner
may
also
need
the
following
items
in
order
to
conduct
a
thorough
and
accurate
search
of
the
devices:
computer
hardware,
software,
peripherals,
internal
or
external
storage
devices,
power
supplies,
cables;
internet
connection
and
use
information;
security
devices;
software;
manuals;
and
related
material.
Searching
the
digital
device
itself
would
irreversibly
alter
data
and/or
evidence
on
the
device.
The
commonly
accepted
best
practice
method
to
search
a
digital
device
for
evidence
involves
creating
a
digital
image
of
the
device
and
then
searching
that
image
for
the
responsive
evidence.
Creating
a
forensic
image
does
not
alter
any
evidence
on
the
device;
it
only
copies
the
data
into
a
searchable
format.
The
image
is
then
searched
using
search
tools
to
locate
and
identify
that
evidence
whose
seizure
is
authorized
by
this
warrant.
The
unaltered
device
and
the
image
are
then
preserved
in
evidence.
C3-IO73I
1
Aindavil
Page
4
ol'5
Revised
I
1-7-2023
Modern
digiltil
devices
and
media
can
contain
many
gigabytes
and
even
terabytes
of
data.
Due
to
the
potential
for
an
extremely
large
volume
of
data
contained
in
devices
and
media,
and
that
fact
that
evidence
can
be
stored/located
in
unanticipated
locations
or
formats
and/or
embedded
in
other
items
stored
on
the
device/media,
investigators
typically
need
to
use
specialized
equipment
in
their
search.
Such
large
volumes
of
data
also
mean
that
searches
can
take
days
or
even
weeks
to
complete.
For
these
reasons,
1
request
authority
to
remove
from
the
search
location
all
digital
devices
and
media
that
could
contain
evidence
authorized
for
seizure
under
the
warrant
for
subsequent
search
pursuant
to
the
terms
of
the
warrant.
1
also
request
authority
to
obtain
assistance
from
a
technical
specialist,
to
review
the
digital
device(s)
and
digital
media
for
the
best
and
least
intrusive
method
of
securing
digital
evidence
that
this
warrant
authorizes
for
seizure,
and
to
assist
in
securing
such
evidence.
Your
Affiant
requests
authorization
to
search
for
and
seize
the
listed
items
in
Attachment
B,
hereby
attached
and
incorporated
by
reference.
Service
Provider
shall
send
the
information
electronically
via
email
at
or
to
Investigator
Robert
Norton
at
the
Lincoln
Police
Department,
575
S
10th
Street,
Lincoln,
NE,
68508.
This
search
warrant
shall
be
executed
and
returned
within
ten
(10)
days
to
a
Clerk
of
the
Lancaster
District
Court,
Nebraska.
In
the
event
records
are
not
received
from
the
Service
Provider
within
ten
(10)
days,
your
Affiant
requests
authorization
to
returned
the
search
warrant
within
ten
(10)
days
of
receipt
of
the
records.
Further
AFFIANT
saith
not;
Robert
Norton,
AFFLANI
Sfes,..
VS
C3-
10731
1
AITidavil
Page
5
ol'S
Revi.sed
11-7-2023
ATTACHMENT
A
Property
to
Be
Searched
This
warrant
is
directed
to
seize
and
search
the
following;
•
An
unknown
brand
laptop
computer
located
in
the
Lincoln
Police
Property
Evidence
Unit
at
575
South
lO"
’
Street,
Lincoln,
Lancaster
County,
NE,
labeled
with
Property
Number
Q2327819
and
Case
Number
C3-r073
1
1.
C3-1
073
1
I
Aliacliinenl
A
Page
I
of
I
Revised
10-1
1-2023
ATTACHMENT
B
Particular
Things
to
be
Seized
To
the
extent
that
the
information
described
in
Attachment
A
is
within
the
possession,
custody,
or
control
of
the
Lincoln
Police
Department
it
is
requested
to
search
for
and
seize
the
following
records
for
each
item
listed
in
Attachment
A
to
include
including
any
live
and/or
deleted
data
for
the
time
frame
of
September
28,
2016
at
0001
hours
CST
to
December
1,2023
at
0001
hours
CST,
specifically
for
the
following:
1.
Evidence
of
other
accounts
associated
with
this
device
including
email
addresses,
social
media
accounts,
messaging
“
app
”
accounts,
and
other
accounts
that
may
be
accessed
through
the
digital
device
that
will
aid
in
determining
the
possessor/user
of
the
device;
2.
Evidence
of
use
of
the
device
the
above
dates,
to
communicate
with
others
about
the
above-listed
crime(s),
via
email,
chat
sessions,
instant
messages,
text
messages,
app
communications,
social
media,
internet
usage,
and
other
similar
digital
communications;
3.
Photographs,
images,
videos,
documents,
and
related
data
created,
accessed,
read,
modified,
received,
stored,
sent,
moved,
deleted
or
otherwise
manipulated
between
the
above
dates;
4.
Evidence
of
use
of
the
device
to
conduct
internet
searches
relating
to
above-mentioned
crime(s);
5.
Information
that
can
be
used
to
calculate
the
position
of
the
device
between
the
above
dates,
including
location
data;
GPS
satellite
data;
GPS
coordinates
for
routes
and
destination
queries
between
the
above-listed
dates;
“
app
”
data
or
usage
information
and
related
location
information;
IP
logs
or
similar
internet
connection
information,
and
images
created,
accessed
or
modified
between
the
above-listed
dates,
together
with
their
metadata
and
EXIF
tags;
6.
Evidence
of
the
identity
of
the
person
in
possession
of
the
device
on
or
about
any
times
that
items
of
evidentiary
value,
located
pursuant
to
this
warrant,
were
created
modified,
accessed
or
otherwise
manipulated.
Such
evidence
may
be
found
in
digital
communications,
photos
and
video
and
associated
metadata,
IP
logs,
documents,
social
media
activity,
and
similar
data;
C3-IO731
1
Allachment
13
Page
I
of
1
Revised
10-11-2023
