The RCFL can help with search warrant preparation as it applies to computer evidence, by advising on computer related language, which may be included in the affidavit.
On-Site Seizure and Collection
Requests for this type of assistance should be made a minimum of 48 hours in advance by filling out a Service Request form. However, the RCFL understands that there will be times when an agency will unexpectedly discover computer evidence that they are unprepared to manage. Under these circumstances, the advance notice requirement is waived, but for scheduling purposes, the more lead-time given to the RCFL, the better. Once the search request is evaluated by the RCFL, the Operations Manager will assign it to an examiner who will then contact the requesting agency.
Duplication, Storage and Preservation of Computers and Computer Related Evidence
Examinations are typically conducted on copies of the original evidence because of the possibility that the data may be contaminated. Therefore, RCFL Examiners, depending on the circumstances, will either duplicate the media (or copy the information) on-site, or they will bring the electronic equipment to the laboratory where they will duplicate the media and then perform the examination.
Prompt, Accurate and Impartial Forensics Examinations of Digitally Stored Media
Computer Forensics Examiners are scientists. As scientists, their job is to conduct a thorough and objective examination of a computer and/or computer related evidence to convert it from a digital format into something that the investigator can view. It is not the examiner's responsibility to analyze the data for its meaning or significance to the investigation. This impartiality and objectivity lends credibility to both their findings and subsequent testimony.
As records are recovered from seized computer evidence, the prosecutor is likely to use the Examiner to introduce the computer or computer related evidence into court. As an expert witness, the Examiner can explain, under oath, about how they conducted the examination and what they discovered as a result.
Cell Phone Investigative Kiosk
This kiosk allows users to extract data from a cell phone, put it into a report, and burn the report to a CD or DVD in as little as 30 minutes.
Loose Media Kiosk
Our Loose Media Kiosk (LMK) enables users to review evidentiary data found on such items as handheld electronic devices such as thumb drives, flash media, CDs/DVDs and more.