Coalfire had a contract to do penetration testing for the Iowa State Court Administration. When two coalfire penetration testers broke into a rural county courthouse, the sheriff arrested them. The county attorney charged them with criminal trespass! Come participate in a legal discussion of this \arresting" story. Lessons learned apply to all kinds of investigations, including DFIR.