The RCFL can help with search warrant preparation as it applies to digital evidence by advising on computer-related language.
Onsite Seizure and Collection
Requests for this type of assistance should be made a minimum of 48 hours in advance by filling out a service request form with a RCFL Service Area. The advance notice requirement may be waived in certain circumstances. Once the search request is evaluated by the RCFL, it will be assigned to an examiner who will then contact the requesting agency.
Duplication, Storage, and Preservation of Digital Devices and Files
Examinations are typically conducted on copies of the original evidence to preserve evidence integrity. Therefore, RCFL examiners, depending on the circumstances, will either duplicate the media onsite or in the laboratory before performing the examination.
Prompt, Accurate, and Impartial Forensics Examinations of Digitally Stored Media
Computer forensics examiners are scientists. As scientists, their job is to conduct a thorough and objective examination of a computer and/or computer-related evidence to convert it from a digital format into something that investigators can view. It is not the examiner's responsibility to analyze the data for its meaning or significance to the investigation. This impartiality and objectivity lends credibility to both the examiner’s findings and subsequent testimony.
If a case goes to trial, the prosecutor is likely to use the examiner to introduce the digital device or evidence into court. As an expert witness, the examiner can explain, under oath, how the examination was conducted and what was found.
Cell Phone Investigative Kiosk (CPIK)
The CPIK allows users to extract data from a mobile phone, put it into a report, and make a copy of the report in as little as 30 minutes.
Loose Media Kiosk (LMK)
The LMK enables users to review evidentiary data found on handheld electronic devices such as thumb drives, flash media, CDs/DVDs, and more.