Enabling Initial Computer Investigation by Non-Expert Enforcement Personnel

The University of Illinois Chicago is undertaking the development of a 'Live Computer System Capture and Triage Tool (CCTT)' that guides law enforcement first responders (LEFRs) at the state and local level, who are not presumed to be experts in computer or networking technologies yet regularly encounter computer systems in the course of their duties. The CCTT will provide the capacity and interactive guidance to allow these non-experts to quickly, easily and accurately gather evidence/information from a digital system and support an on-site examination of the evidence.

This application contributes to the BJS 2002 study area of computer crime forensic reduction function area. The Live Capture for First Responders tool will quicken the forensic analysis of suspect digital media by acquiring volatile information from live systems. Furthermore, cases will be solved more readily when the tool is used in conjunction with other forensic tools.

nca/ncf

This award will provide funding that will allow for the continuation of The University of Illinois's undertaking in the development of a 'Live Computer System Capture and Triage Tool (CCTT)' that guides law enforcement first responders at the state and local level, who are not presumed to be experts in computer or networking technologies yet regularly encounter computer systems in the course of their duties. The CCTT will provide the capacity and interactive guidance to allow these non-experts to quickly, easily and accurately gather evidence/information from a digital system and support an on-site examination of the evidence. This application contributes to the Bureau of Justice Statistics 2002 study area of computer crime forensic reduction function area. The Live Capture for First Responders tool will quicken the forensic analysis of suspect digital media by acquiring volatile information from live systems. Furthermore, cases will be solved more readily when the tool is used in conjunction with other forensic tools. nca/ncf