|
|
Many large scale investigations (financial fraud, bankruptcies, bank failures, or others) involve hiring of expensive forensic consultants to perform the e-discovery analysis. These consultants will perform time consuming forensic analysis on all computers, whether relevant to the case or not. The results are financially disastrous for the client but lucrative for the consultants.
Our Triage-Lab® and Triage-ID® tools provide forensic examiners the ability to extract and/or analyze relevant files for information, as well as qualify computers for examinations.
| Case Study - e-Discovery |
| Forensic examiners use ADF Triage-Lab and Triage-ID to analyze or extract relevant files for forensic analysis related to their cases. |
| Why? |
|
For many digital forensic cases, a full forensic examination of a computer, server, or even an extra large email file is overkill. Recent financial investigations have shown that forensic examiners need to focus on all financial related files as well as target emails pertaining to a limited number of individuals only. The examiner wanted to avoid unnecessary imaging and analysis of other digital files in allocated and unallocated space of the computers. |
| Process |
|
The triage process is programmed to target file locations and file types in order to extract relevant files as well as individual emails and their attachments for further analysis. This is done automatically with no user interaction. This process can be run on both the computers directly as well as the drive images. |
| Key Features |
|
- Empowers operators with automated easy to use tools
- Scan-Profile feature allows an easy deployment and control of secured classified intelligence to field operators
- Forensically sound tool used directly on suspect PC for maximum efficiency
- Intelligent search technology targets areas of recent activity and most common suspect file locations
|
| Outcome |
|
The necessary files are extracted quickly in a forensically sound manner for analysis. |
| Benefits |
|
The investigation process is cut drastically by eliminating all unnecessary files for analysis, including the unnecessary time consuming process of indexing data. |
|
