When collecting digital evidence, speed is often the name of the game, such as when you are serving a search warrant, dealing with a mass casualty incident, working a consent search, or trying to ascertain where to focus your efforts when dealing with multiple devices. When dealing with these types of use cases, one-dimensional or one size fits all evidence collection, will not pass muster and you need the ability to cut through the noise and get to the relevant information fast.
ADF digital forensic software gives you, the investigator or examiner, the ability to easily choose how you want to collect digital evidence. You can prioritize speed or opt for a more comprehensive search when you have the time to do so. Since each investigation or crime scene is different, with ADF you have the ability to quickly adapt to easily get the evidence you need to help you move your case forward.
In this short 3 minute video, Rich Frawley, our Director of Training and digital forensic specialist, teaches you how to understand the options you have in the Define Files screen when you choose to customize a Search Profile. When defining files to collect, whether for file collection, by keyword, or by hash ADF offers you several options that need to be selected when you create a Custom Search Profile. Your options are:
You will also be able to control the options related to archives, documents, and picture DB files:
Digital Evidence Investigator PRO is the best automated digital forensic tool for field investigations of mobile devices and computers. Tie the user to a files, artifacts and digital evidence in a timeline view. DEI PRO comes with out of the box search profiles which can be customized by investigators and examiners.