Documents & Forms
Best Practices - Collection Seizure of Mobile Devices for Investigators
This training will help the Investigator / First Responder to identify mobile device digital evidence and associated media, and take precautions to preserve the evidence. It also provides information related to the specialized and extensive analysis that may be conducted by forensic personnel in order to review data contained on the evidence. Finally, they will obtain a clear understanding of the required documentation and the potential for testimony related to the seizure of any digital evidence.
Best Practices for a Quality Digital Forensics Examination
To help an RCFL provide the highest level of service to its law enforcement customers, the RCFL National Program Office recommends the following “best practices” in this document.
Directions to TVRCFL
This document is a map with written driving directions on how to get to TVRCFL.
Macintosh Forensic Analysis
This course provides the fundamental knowledge and skills necessary to identify and collect volatile data, acquire forensically-sound images of Apple Macintosh computers, and perform forensic analysis of macOS operating system and application artifacts.
Non-Participating Agencies Guidelines
The Tennessee Valley Regional Computer Forensic Laboratory (TVRCFL) strives to provide the highest level of forensic services possible in consideration of restraints imposed by limited staffing, funding and other resources. The TVRCFL receives multiple service requests from its participating agencies. To meet the demand for those services in a manner that is fair and efficient, the TVRCFL Local Executive Board has set the following policies in this document to meet the digital forensic needs of non-participating agencies (NPA) requesting assistance.
Non-Participating Sample Agency Letter
Non-participating agencies should write a letter on their stationary that briefly explains the nature of their service request. The letter must contain a supervising agent's signature, and can accompany the Service Request Form.
Secure Techniques for Onsite Previewing
This course covers the usage and configuration of two tools (Paladin/Autopsy and osTriage) designed to preview a non-mobile digital device and export files of evidentiary value.
Social Media & Open Source Intelligence
This course covers the skills investigators need to conduct successful online investigations involving social media.
TVRCFL - Request Assistance
Any law enforcement agency operating in the TVRCFL's service area may request assistance with the following activities in this document.
