|
|
ADF Solutions defines “Forensic Triage” as a risk management practice where computers or drive images are processed (or “triaged”) to identify either high value targets to focus forensic resources on, or low value targets to consider eliminating from the forensic process.
Forensic Triage is complimentary to full forensic examinations and should never be considered a replacement.
Problems Today
- Backlogs: The current forensic analysis process is critical for many case investigations. However, the amount of digital data has grown significantly and performing a full forensic analysis on them is not feasible anymore. This approach worked 10 years ago when hard drives were one gigabyte, but has serious drawbacks in today’s world of terabyte drives.
Solution: An intelligent triage program to reduce the number of computers that enter the analysis queue.
- Delays: A suspect computer may contain critical information that can be vital to national security, or saving victims at risk. Seizing the computer for analysis can take days, weeks if not months for results. In the meantime, the suspect is free to operate.
Solution: An intelligent triage program with portable tools that can extract intelligence immediately.
- Lack of efficiency: Forensic examiners and investigators can encounter large volumes of computers at organizations under investigations. Current forensic practices require the seizing and analysis of all computers, regardless of their relevancy to the case. This is expensive and time consuming.
Solution: An intelligent triage program that can allow forensic examiners to identify high target computers for forensic analysis.
- Resource Allocation: The investigation of a suspected terrorist requires significantly more details than the investigation of a local fraud suspect and agencies today target their resources and efforts accordingly. However in the digital forensic world, all evidence and cases are processed similarly.
Solution: An intelligent triage program that can allow forensic examiners to adjust forensic analysis with resources.
Solution
ADF Solutions has proven that an intelligent triage approach reduces forensic backlogs, eliminates the risk associated with forensic delays, addresses efficiency and allocation of key forensic resources.
|
