The TALON is a portable device which can be easily transported to a Crime Scene and be used to copy the data in a suspects computer.  Once this data has been captured, the analysis is performed back in the Lab. Credit: USFWS

DIGITAL EVIDENCE UNIT

The Digital Evidence Team consists of the Audio Unit, Digital Imagery Unit, Computer Unit, and Video Unit.

---

AUDIO UNIT

The Audio unit uses state-of-the-art hardware, software and knowledge to perform clarification to audio evidence items.

Audio evidence items are processed to selectively reduce interfering noise and to clarify the intelligibility and the understanding of the recording.  A variety of noise types are addressed such as wideband, stationary tones, and interfering pulses using different techniques for each.

Occasionally we receive damaged media to be repaired, restored, or retrieved for playback and examination.

Format Conversion is another service we offer to our agents.  Audio materials can be converted from one format to another, micro cassette, standard cassette and audio CD.  In some cases, the media is converted from a virtual source such as a voice mailbox or a file from a digital recorder.

AUDIO EXAMINATIONS

Format Conversion
Audiotape can be converted from one format to another, microcassette or standard cassette.

Damage Media Repair
Audio recordings can be repaired, restored, or retrieved for playback and examination, if damage is not too extensive.

Processing
Processing examinations are conducted to selectively reduce interfering noise on audio recordings digitally to clarify the intelligibility and the understanding of the recording.

---

DIGITAL IMAGERY UNIT

The Digital Imagery Unit analyzes seized digital cameras and memory cards to extract metadata and images.  The Unit also uses high-end printers to prepare court displays from both analog and digital submissions of  images, charts, photographs, field notes and maps.  The Digital Imagery Unit maintains a studio to digitally photograph evidence items that may need special lighting requirements.

PHOTOGRAHIC IMAGE EXAMINATION AND PRESENTATION

Courtroom Displays
Creation of visual displays of maps, photographs, and sketches.

Forensic Photography
Photographing of evidence items for documentation or creation of a courtroom display.

Photographic Comparisons
Film, or photographs can be compared or overlaid with other photographs of suspect or crime site.

Photographic Display
Film or photographs can be processed to provide clarity and/or enlarged to produce a court room display.

Information Presentation
Visual depiction of information or data to make it visually understandable.

---

COMPUTER UNIT

The Computer Unit analyzes computers and digital media to extract case related information including files, documents, E-mail, Internet History, and report generation from software on the evidence.  High end server and workstations are used to perform this work.  The software being used includes:

1. EnCase (Pro Suite, Fastblock SE, FIM)
2. Access Data’s Ultimate Tool Kit (FTK)
3. Paraben’s E-mail Examiner
4. Paraben’s Device Seizure
5. VMWare

COMPUTER EXAMINATIONS

Content
Examinations can determine what type of data files are in the computer.

Comparison
Examinations can compare data files to known data files.

Deleted Data Files
Deleted files can be recovered from the computer disk.

Extraction
Data files can be extracted from the computer.

Format Conversion
Data files can be converted from file format to another file format.

Keyword Search
Data area of storage device can be searched for words and phrases and occurrences recorded.

Passwords
Passwords can be recovered, decrypted, and data accessed.

Transaction
Examination can determine the time and date that data files were created.

Requesting of a Field Seizure or Field Search Examination
Submit requests for a field seizure or field search one week in advance in advance of execution of warrant.

Provide as much information as possible at the time of the field examination request.
Determine the type, number, and operating systems of computers subject to the warrant. If computers are networked, determine the type of network, number of servers, and number of computers connected to the network.

Determine whether encryption and/or password protection is in use.

Specify whether a seizure of computers and media or an on-site examination is required.

Provide a copy of the warrant for reference.

---

VIDEO UNIT

The Video unit works with video material in many ways to make the evidence accessible for the court system. Typical analysis is producing clarified photographic prints from images depicted on videotape. 

Format and standards conversions are sometimes necessary when dealing with video sources on an international level.  Videotape can be converted from one format to another, Digital, Hi-8, VHS, S-VHS and DVD.  Videotape can be converted from one standard to another, Pal, NTSC, S-Pal, or SECAM. 

Physically damaged videotape can be repaired, restored, or retrieved for analysis when necessary.

For cases where the accompanying audio is poor, the video can be processed to provide clarity to the audio component.

Other specialized processes can be performed such as a mosaic or blur can be added to video recordings to protect a person's identity.  Image stabilization can be performed when the source material is unstable so that the area of interest is more legible. 

Time Lapse video can be converted into real time. 

New digital video recordings have scores of different non-standard formats to be dealt with requiring constant updating of software tools and knowledgebase. 

VIDEO EXAMINATION

Authenticity
Authenticity examinations are conducted to determine whether video recordings are continuous.

Damaged Video
Tape Repair Videotape can be repaired, restored, or retrieved for playback and examination, if damage is not too extensive.

Format Conversion
Videotape can be converted from one format to another, Beta, Digital, Hi-8, VHS, or S-VHS.

Video Stabilization
Video content can be stabilized to increase clarity.

Photograph to Video Comparison
Videotape images can be compared or overlaid with other photographs of suspect or crime site.

Processing of Audio and/or Video
Video can be processed to provide clarity to the video. Audio can be processed selectively to reduce interfering noise on audio recordings digitally to clarify the intelligibility and the understanding of the recording.

Redacted
Videotape can be redacted to protect a person's identity.

Standard Conversion
Videotape can be converted from one standard to another, Pal, NTSC, S-Pal, or SECAM.

Time LapseVideo Conversion
Time Lapse video can be converted into real time.

Video Image Processing
Processed prints can be produced from images depicted on videotape.

BACK TO TOP