IDC PeerScape: Lessons Learned from Digital Forensics Implementations

IDC PeerScape Figure

• Figure: IDC PeerScape: Digital Forensics — Best Practices to Assure Successful Investigations

Executive Summary

Peer Insights

• Practice 1: Leverage Automation to Manage Growing Data Volumes

• Challenge

• Examples

• Department of Justice

• January 6, 2021, U.S. Capitol Riot Investigation

• Project VIC

• Guidance

• Practice 2: Use Advanced Analytical Tools to Prevent Overreach

• Challenge

• Examples

• Crown Prosecution Service, London

• Rape and Serious Sexual Offences Strategy

• Southern Alberta Child Exploitation Unit

• Using Advanced Analytics and Tools to Mitigate Overreach

• Guidance

• Practice 3: Invest in Multiple Tools to Manage Expanding Data Sources

• Challenge

• Example

• Project VIC

• Guidance

• Practice 4: Document and Share Organizational Knowledge Culled by the Investigative Community

• Challenge

• Examples

• INTERPOL

• Seattle Police Department

• CSAM Investigative Best Practices

• Guidance

• Practice 5: Proactively and Openly Engage Vendors to Improve Product Capabilities

• Challenge

• Example

• Georgia Bureau of Investigations

• Guidance