Honest question here: From a legal standpoint how can the" prosecution already knows [the harddisk] to contain incriminating data" if the drive is encrypted?
Are eyewitnesses saying "I saw him type the death list into his laptop" good enough? What is the criteria to meet that point?