Lindsay Clancy Trial: State Trooper Reveals What Was Really Searched on That Computer

**Tony Brueski** (0:00)
This is live courtroom coverage of the trial of Lindsay Clancy from the Hidden Killers podcast in True Crime Today. Now, back to the courtroom.

**Kevin Reddington** (0:11)
Good morning, sir.

**Kyle Pavao** (0:12)
Good morning, Ara.

**SPEAKER_4** (0:14)
All right. Thank you. Good morning. Can you please state and spell your name for the record?

**Kyle Pavao** (0:19)
Kyle Pavao, K-Y-L-E, last name P-A-V-A-O.

**SPEAKER_4** (0:25)
And where do you work?

**Kyle Pavao** (0:26)
Massachusetts State Police.

**SPEAKER_4** (0:27)
How long have you worked there?

**Kyle Pavao** (0:30)
Eight years with 18 total law enforcement experience.

**SPEAKER_4** (0:33)
So you worked in law enforcement prior to the state police?

**Kyle Pavao** (0:36)
Correct.

**SPEAKER_4** (0:36)
In what department?

**Kyle Pavao** (0:37)
Town of Mattapoiset.

**SPEAKER_4** (0:39)
And are you in a specific role or unit at this time?

**Kyle Pavao** (0:44)
I was.

**SPEAKER_4** (0:45)
What do you do now?

**Kyle Pavao** (0:48)
Now I'm a sergeant in field assigned to the born barracks.

**SPEAKER_4** (0:51)
And previously, where were you assigned?

**Kyle Pavao** (0:54)
I was a trooper in the cyber crime unit.

**SPEAKER_4** (0:57)
How long were you in the cybercrime unit?

**Kyle Pavao** (0:59)
Roughly three and a half years or so.

**SPEAKER_4** (1:02)
And what is the cybercrime unit?

**Kyle Pavao** (1:04)
It's the state's primary child exploitation unit. Assigned to that or included in that is also a forensic branch, which deals with multiple other crimes other than child exploitation.

**SPEAKER_4** (1:20)
Would it be accurate to state that you are able to examine digital forensics, like computers and phones, that are related to other cases?

**Kyle Pavao** (1:30)
Yes, correct.

**SPEAKER_4** (1:31)
Do you have to have specialized training to be in that unit?

**Tony Brueski** (1:34)
Yes.

**SPEAKER_4** (1:34)
What type of specialized training did you have?

**Kyle Pavao** (1:37)
So I am a certified forensic computer examiner. I'm a certified forensic MAC examiner.
I'm a Celebrate certified mobile examiner. And I'm a Magnet certified digital video examiner.

**SPEAKER_4** (1:50)
What is Celebrate?

**Kyle Pavao** (1:53)
Celebrate is a company that has proprietary software that parses through data.
Most people know it for cell phones. There is a branch that does computers, but it's mostly known for cell phones extracting data and also parsing that data out.

**SPEAKER_4** (2:11)
What about Magnet?

**Kyle Pavao** (2:13)
Magnet is the same thing. So Magnet is also another proprietary company. They have software, imaging software. They mainly focus on computers.
They can do some cell phone stuff, but they primarily focus on computers.

**SPEAKER_4** (2:31)
To be certified in Celebrate and Magnet, did you have to take classes and pass exams?

**Kyle Pavao** (2:37)
Yeah, so my Forensic Computer Classes certification is probably like a six-month long process. It's two weeks of schooling down in Florida. It's in a one-on-one peer review for four months, of practicals of different file systems and computers.
Once you get through that, it then is a practical exam. Then once you pass the practical, it turns into a written exam.

**SPEAKER_4** (3:05)
Did you have an opportunity to examine the extraction of a Surface Pro that was seized from 47 Summer Street in Duxbury on or about September 16th, 2025? I did. To be clear, the Surface Pro was seized from 47 Duxbury Street in 2023 It was in 2025 that you examined the extraction, correct?

**Kyle Pavao** (3:28)
That is correct. I was provided those files.

**SPEAKER_4** (3:31)
What is an extraction?

**Kyle Pavao** (3:33)
These are actually, it's a computer image. Extraction is usually typically referred to as cell phones. This is a computer image. This was an actual E01 file, which is an encased forensic file.
What it does is it copies out the bit-for-bit data on the particular drive that you targeted at. Then the encased file compresses the forensic image. It also adds some metadata to it. You can type in like case files. It keeps some integrity to it.

**SPEAKER_4** (4:11)
Is it basically you take a computer or a cell phone and you make an exact copy of the data that's on that cell phone or computer?

**Kyle Pavao** (4:21)
Yes. Computers, yes. Cell phones, no.

**SPEAKER_4** (4:24)
But you were working on a computer or a Surface Pro?

**Kyle Pavao** (4:27)
Correct.

**SPEAKER_4** (4:27)
And so the extraction for the Surface Pro would be, the extraction would be a copy of the data that was on the Surface Pro.

**Kyle Pavao** (4:34)
Yes. So the image in this case is a bit for bit copy of that drive.

**SPEAKER_4** (4:38)
And when you do the extraction or when you view the extraction, are you changing any of the data?

**Kyle Pavao** (4:45)
No. That's why we use these types of images so we don't touch the actual data on that computer.