Reducing Computer Forensics Case Load: Are you Employing Best Practices for Collaborative Analysis & Lab Infrastructure?

There was a day when 30 minutes viewing a floppy diskette sector by sector in the hopes of recovering one or two files that may prove beneficial to an investigation was all it took to make the case. Today, it may take 30 days to create and analyze a data set that yields millions of files with thousands of responsive graphics, documents and metadata. It is not uncommon for today's target environments to contain multiple computers, USB devices, discs and / or networks with incredibly large amounts of stored data. To effectively cope with this volume of information, investigators and analysts must be prepared to work together. This collaboration should include: collaborative data analysis, collaborative data processing, remote case access and administration, and multiple user permission and task management. Keith Lockhart will review these requirements and how to implement them in your work environment.

Keith Lockhart, Vice President, Training, AccessData
Keith Lockhart is responsible for the development of forensic and encryption training solutions for local, state, federal and international law enforcement agencies, as well as worldwide corporate entities involved in the prevention, investigation and prosecution of high-technology crime. Prior to joining AccessData, Keith served as a computer crime specialist at the National White Collar Crime Center (NW3C) in Fairmont, WV. Keith served as program manager of the INET (Internet Trace Evidence Recovery & Analysis) course, providing the framework of complex research and design for its development and maintenance. Prior to NW3C, Keith was a police officer with Kent State University Police Department.