Issue link: https://let.epubxp.com/i/143936
COVER STORY computer that can be purchased at Best Buy," Fazio explains. "It won't have the power to run digital forensics software." ■ A forensics laptop, such as a rugged laptop from Dell, to perform digital forensic analysis in the field. ■ A dedicated server to store digital evidence. But with a $50,000+ price tag to get started and $30,000+ in annual upkeep after that, a full-blown lab may be more than the average mid-size department can afford. The good news is they can enter the digital forensics space on a smaller scale, says Eskridge. "Smaller departments can add a triage-level forensic capability that works for 70 to 80 percent of their cases," he says. "This type of lab can be set up for about $10,000, including a cell phone solution." This capability would allow smaller departments to perform first-level tri- age, or scan devices for investigative information. In a child pornography case, detectives might employ technology such as Paraben's P2 Commander or Dell's Mobile Digital Forensics software to collect pictures off the computer. Cell phones can be quickly processed with tools that rely on advanced plug-in technology to quickly search through emails, chat logs, messages, Internet files and call data. "Cell phone forensics tools fit well with the whole triage concept," says Eskridge. "With a $2,500 tool and five minutes, they can retrieve the same information they're going to get from a lab in three months." Meanwhile computers may be searched with triage tools from Guidance Software and AccessData, which have a lower price point than their more advanced software. AccessData's AD Triage allows officers to safely view and collect data from computers at the scene, while EnCase Portable is delivered on a USB device that allows officers to quickly and easily collect digital evidence in a forensically sound manner. Dell's Mobile Digital Forensics solution utilizes Dell rugged laptops running SPEKTOR software from Evidence Talks to collect forensic intelligence in the field. This system also identifies and pulls data from desktop computers, laptops and portable devices. But its primary advantage is that it puts all the digital forensics tools into one "suitcase." "The problem with triage is that some triage devices are very specialized. Some only do phones, some lend themselves to laptops and computers, others only do GPS or satellite devices," says Sundarababu. "The second problem with many devices is that the analysis still must be performed by a very experienced per- Circle 38 on Reader Service Card www.officer.com July 2013 Law Enforcement Technology 25