|
|
Our Triage-Lab® and Triage-ID® tools provide forensic examiners the ability to qualify computers with a high degree of confidence. The tools extract critical intelligence for investigators prior to the full forensic process so that they can continue their investigations.
| Case Study - Eliminating Computers |
| Forensic examiners use ADF Triage-ID directly on seized suspect computers to qualify them for further forensic examinations. |
| Why? |
|
Forensic examinations of computers is necessary in many cases. However, many computers are not critical to investigations and a full forensic analysis on such computers wastes valuable resources. |
| Process |
|
The triage process is automated so it runs with no user interaction. It takes little time to set up a triage and minimal time to analyze the results. |
| Key Features |
|
- SearchPaks store forensic intelligence and can automatically identify critical evidence
- Triage-Lab provides full analysis of unallocated and slack space
|
| Outcome |
|
Based on the triage results, the forensic examiner can eliminate a computer with a high degree of confidence, or submit for full forensic analysis. |
| Benefits |
|
The minimal time investment of a triage scan can save several days of valuable time for documenting, imaging, and manually analyzing the computer. |
| Case Study - Extracting Critical Information for Investigators |
| Forensic examiners and investigators use ADF Triage-Lab® directly on backlogged drive images to extract information. |
| Why? |
|
Forensic examinations of computers is necessary in many cases. A case can get held up if there is a forensic backlog and the investigator is waiting for critical information. |
| Process |
|
The triage process is automated and runs with no user interaction. It takes little time to set up a triage and minimal time to analyze the results. |
| Key Features |
|
- SearchPaks store forensic intelligence and can automatically identify critical evidence
- Triage-Lab provides full analysis of unallocated and slack space
|
| Outcome |
|
Based on the triage results, the investigator is provided with critical evidence to continue the investigation. |
| Results |
|
The minimal time investment of a triage scan can save several days of valuable time for documenting, imaging, and manually analyzing the computer. |
|
