• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • Home
  • About
  • The Magazine
  • Partners
  • Products
  • Advertise
  • Contact
  • Facebook
  • Twitter
  • Instagram
  • Subscribe to the Magazine
American Police Beat

American Police Beat Magazine

Law Enforcement Publication

  • Home
  • Featured
    • LA school board cuts police funding to support racial equity
      New PT standard for future officers draws objections
      Law enforcement investigates death threats against California...
      K-9 lifesaver
      Cop Hobbies: Geocaching
  • Topics
    • On the Job
      • Paging Dr. Oz: N.J. police receive backup from a celebrity doctor
        Cape Coral Police Department testing mountain e-bikes for patrol
        Yale Police officers rescue 6-month-old baby found in stolen car
        Heroic officer rescues homeowner and pet from house fire
        The gatekeepers of school safety
    • Labor
      • Union says “many” U.S. Capitol Police officers want to leave the...
        NYPD disciplinary records made public
        Raising the bar
        Retirements up, recruiting down
        Maryland considers repealing officers’ bill of rights
    • Tech
      • Technology gives police an edge in chases
        Data-driven investigations
        Police technology: Why so far behind?
        Charlotte-Mecklenburg police use key technology to battle crime wave
        Denver police gun detection technology pays off
    • Training
      • New PT standard for future officers draws objections
        LPVO: The Goldilocks of AR optics
        Chicago PD introduces real-life situation training
        Reset in recoil: Working with your gun, not against it
        K-9 lifesaver
    • Policy
      • Capitol Police Officers Lack Confidence in Leaders Following Unrest
        Police warn new NJ law decriminalizes underage drug and alcohol use
        Minneapolis decides to “refund” police following crime increase
        NYPD disciplinary records made public
        Pennsylvania top court decides on warrantless vehicle searches
    • Health/Wellness
      • Capitol riot suicides shine light on police mental health struggles
        So much for those New Year’s resolutions, eh?
        Save jobs and lives
        Everyday work trauma and your brain
        Getting some shut-eye
    • Community
      • LA school board cuts police funding to support racial equity
        When parents are arrested, what about the kids?
        Law enforcement investigates death threats against California...
        African American law enforcement leaders pass historic milestone
        Life-changing gifts
    • Humor
      • Cheeto dust leads to bust
        The force is strong with this one
        Dude, where’s my car?
        Dressed to impress
        How to retire angry
    • We Remember
      • Louisiana cemetery removes its whites-only policy after refusing to...
        Slain Capitol Police officer honored
        A thread of courage and love
        COVID-19 “very likely” to kill more cops than 9/11
        Always honored, never forgotten
  • On the Job
    • Paging Dr. Oz: N.J. police receive backup from a celebrity doctor
      Cape Coral Police Department testing mountain e-bikes for patrol
      Yale Police officers rescue 6-month-old baby found in stolen car
      Heroic officer rescues homeowner and pet from house fire
      The gatekeepers of school safety
  • Labor
    • Union says “many” U.S. Capitol Police officers want to leave the...
      NYPD disciplinary records made public
      Raising the bar
      Retirements up, recruiting down
      Maryland considers repealing officers’ bill of rights
  • Tech
    • Technology gives police an edge in chases
      Data-driven investigations
      Police technology: Why so far behind?
      Charlotte-Mecklenburg police use key technology to battle crime wave
      Denver police gun detection technology pays off
  • Training
    • New PT standard for future officers draws objections
      LPVO: The Goldilocks of AR optics
      Chicago PD introduces real-life situation training
      Reset in recoil: Working with your gun, not against it
      K-9 lifesaver
  • Policy
    • Capitol Police Officers Lack Confidence in Leaders Following Unrest
      Police warn new NJ law decriminalizes underage drug and alcohol use
      Minneapolis decides to “refund” police following crime increase
      NYPD disciplinary records made public
      Pennsylvania top court decides on warrantless vehicle searches
  • Health/Wellness
    • Capitol riot suicides shine light on police mental health struggles
      So much for those New Year’s resolutions, eh?
      Save jobs and lives
      Everyday work trauma and your brain
      Getting some shut-eye
  • Community
    • LA school board cuts police funding to support racial equity
      When parents are arrested, what about the kids?
      Law enforcement investigates death threats against California...
      African American law enforcement leaders pass historic milestone
      Life-changing gifts
  • Humor
    • Cheeto dust leads to bust
      The force is strong with this one
      Dude, where’s my car?
      Dressed to impress
      How to retire angry
  • We Remember
    • Louisiana cemetery removes its whites-only policy after refusing to...
      Slain Capitol Police officer honored
      A thread of courage and love
      COVID-19 “very likely” to kill more cops than 9/11
      Always honored, never forgotten
  • Jobs and Careers
  • About
  • The Magazine
  • Partners
  • Products
  • Advertise
  • Contact
Search

On the Job

The one question

What to ask your digital forensics expert before your opposition does

Donna Eno Published June 20, 2019 @ 9:00 am PDT

 

It seems that colleges and universities are pumping out digital forensics experts by the dozens these days. There is an ever-increasing understanding of the need for digital forensics experts in corporate and legal circles. This is a good thing for the industry, but it also carries with it some inherent risks.

While we welcome the fresh-faced newcomers to an exciting field, we need to also understand that their education may not be as complete as it needs to be. For example, a lot of what is being taught in the modern classroom is evidence handling and the modern tools to use. This is good, but the one thing that I see being missed is a robust knowledge of the underlying technology. The digital forensics tools that most students are being taught to use, while impressive, do not necessarily give them a thorough understanding of what is really happening “underneath the hood.” This can be a real problem when your case goes to litigation — either by arbitration or in a court of law.  If your opposition hires my company, for example, they are going to have questions for your expert that could undermine your entire case.

So, what is that one question that can give you confidence in your digital forensics team? It is: “What are the seven layers of the OSI Model?” If your DFE can answer this question, it should give you a good amount of confidence that they have the technical expertise to best evaluate your case.

Now, without going too far into the weeds, let me give a brief synopsis of what the OSI Model is. The OSI Model is the Open Systems Interconnection Model created by the International Organization for Standardization (ISO). This is the model that all computers and electronic devices must use to enable any and all data to be used/stored or networked (received and sent). If a computer person understands this model thoroughly, they can fix any computer problem, write any software program, understand routing and networking in its entirety. This includes databases, email, you name it, they will understand it and how it works. This is especially important in dealing with digital forensics. A computer person or a digital forensics expert must understand how data flows through a computer or any other electronic device to understand thoroughly what is going on within that device. A simple knowledge of digital forensics software is not enough. The digital forensics software may be able to pull all of the data out of a computer or digital device, but the examiner needs to understand what they are viewing and how that data that was data-carved by the forensic software is relevant to your case.

I recently had a case where I was asked to level an opinion about emails that had been sent from one company to another. The emails themselves contained domain addresses that did not necessarily belong to that individual. The question was asked, “How was this possible?” Was this person hacking emails? Were they spoofing email addresses? Or was there some larger nefarious organizational structure causing this to happen? The email servers involved were Microsoft Exchange email servers. The opposition digital forensics expert concluded that this was an anomaly and no nefarious activities occurred. But I had to know for sure. As it turned out, their expert was completely wrong, was discredited by the court during litigation and “my side” won the decision handily.  

On that note, it is also highly critical that you engage a digital forensics expert willing to dig in and research. The best experts are the ones who love learning and honing their craft, simply for the sake of the new and exciting information they will learn. If you’re engaged with a digital forensics expert and you’re not sure how much they are willing to research, ask them what new tool/technique/idea they’ve learned lately in their personal research. This can give you a good indication of where they are at.

Here’s why the research is so important. If your digital forensics expert isn’t willing to do research with regards to your case, you may have problems during litigation. Digital technology is changing almost daily. Keeping up with the technology seems like a no-brainer, but I have found a lot of digital forensics experts don’t do that. They may take the odd class, attend a conference, meet with and/or network with other computer forensics experts and even belong to various organizations. But if they aren’t willing to research for themselves when the case presents itself in such a way that their knowledge and/or background may not be enough, will they go the extra mile? An FBI forensic examiner once told me that 85% of his job was research. Why? Because he dealt with video and audio media, and that type of data technology changes daily. There is also no standardization mechanism in place with video and audio media files, so, yes, a lot of research is involved with those types of cases.

In conclusion, it is absolutely critical that your digital forensics expert thoroughly understands the underlying technology. It is equally important that they be willing to research areas they may not understand. It’s a fact of life that no one person can know everything. The key is that they combine that critical understanding of the technology with that love of learning and research. This is the kind of DFE you want to have on your case. They will not be easily discounted and/or refuted with regard to their findings in a court of law.


Donna Eno is founder and owner of D.Eno Forensics, P.L.L.C. in Hamilton, Montana. She is one of the few people globally who has manually rebuilt corrupt databases. Working in computer forensics, Eno — who has engineering certifications in CNA, MCP+, MCNA, MCSE, MCDBA and CCNA — has successfully investigated over 500 cases, given court testimony and written opinions. She is considered an expert in Computer Forensics based upon the Federal Rules of Evidence; Article 7 Rule 702. (FRE 7 702). 

As seen in the June 2019 issue of American Police Beat magazine.
Don’t miss out on another issue today! Click below:

SUBSCRIBE TODAY!

Categories: On the Job

Primary Sidebar

Recent Articles

  • Technology gives police an edge in chases
  • Cheeto dust leads to bust
  • Louisiana cemetery removes its whites-only policy after refusing to bury black deputy
  • Paging Dr. Oz: N.J. police receive backup from a celebrity doctor
  • Cape Coral Police Department testing mountain e-bikes for patrol
  • Capitol Police Officers Lack Confidence in Leaders Following Unrest
  • Police warn new NJ law decriminalizes underage drug and alcohol use
  • Yale Police officers rescue 6-month-old baby found in stolen car
  • LA school board cuts police funding to support racial equity
  • Union says “many” U.S. Capitol Police officers want to leave the agency
Advertise with APB

Footer

Our Mission
To serve as a trusted voice of the nation’s law enforcement community, providing informative, entertaining and inspiring content on interesting and engaging topics affecting peace officers today.

Contact us: info@apbweb.com

  • Facebook
  • Twitter
  • Instagram

Categories

  • Featured
  • On the Job
  • Labor
  • Tech
  • Training
  • Policy
  • Health/Wellness
  • Community
  • Humor
  • We Remember
  • Jobs and Careers

Editor’s Picks

Ass-kissing, favoritism, oh my!

Ass-kissing, favoritism, oh my!

January 28, 2021

This K-9 is a gym rat at heart!

This K-9 is a gym rat at heart!

January 25, 2021

A thread of courage and love

A thread of courage and love

January 20, 2021

The job doesn’t love you back

The job doesn’t love you back

December 28, 2020

Privacy Policy | Copyright © 2021 American Police Beat, Inc. | Website design, development and maintenance by 911MEDIA

Open

Subscribe

Close
Receive the latest news and updates from American Police Beat directly to your inbox!
  • This field is for validation purposes and should be left unchanged.