to view the entire report in PDF. - Regional Computer Forensics ...
to view the entire report in PDF. - Regional Computer Forensics ...
to view the entire report in PDF. - Regional Computer Forensics ...
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
“One of <strong>the</strong> biggest challenges fac<strong>in</strong>g law enforcement <strong>to</strong>day is technology - and <strong>the</strong><br />
key <strong>in</strong>gredient <strong>to</strong> meet<strong>in</strong>g this challenge is <strong>the</strong> highly qualified men and women assigned<br />
<strong>to</strong> <strong>the</strong> RCFLs.”<br />
—Randall L. Bolelli, Direc<strong>to</strong>r<br />
San Diego RCFL<br />
INTRODUCTION<br />
The San Diego RCFL has <strong>the</strong> dist<strong>in</strong>ction of<br />
be<strong>in</strong>g <strong>the</strong> first FBI sponsored RCFL. While<br />
be<strong>in</strong>g first makes <strong>the</strong>m somewhat unique,<br />
<strong>the</strong> situation fac<strong>in</strong>g <strong>the</strong> San Diego law enforcement<br />
community was all <strong>to</strong>o common:<br />
demand for computer forensic services far<br />
outweighed <strong>the</strong> supply. The situation needed<br />
improvement, and area law enforcement was<br />
determ<strong>in</strong>ed <strong>to</strong> do someth<strong>in</strong>g about it. The<br />
FBI’s San Diego Field Office, along with several<br />
o<strong>the</strong>r local law enforcement agencies, decided<br />
<strong>to</strong> pool <strong>the</strong>ir resources <strong>to</strong> establish a computer<br />
forensics labora<strong>to</strong>ry. The FBI assumed a<br />
majority of <strong>the</strong> start-up costs, while <strong>the</strong> o<strong>the</strong>r<br />
Participat<strong>in</strong>g Agencies donated personnel <strong>to</strong><br />
staff <strong>the</strong> new lab. The concept worked. In a<br />
short while, <strong>the</strong> San Diego RCFL established a<br />
clear standard for <strong>the</strong> effective and efficient<br />
exam<strong>in</strong>ation of digital evidence. Work<strong>in</strong>g as<br />
a team, <strong>the</strong> men and women assigned <strong>to</strong> <strong>the</strong><br />
lab began exam<strong>in</strong><strong>in</strong>g digital evidence and were<br />
able <strong>to</strong> address <strong>the</strong> computer forensic needs<br />
of law enforcement <strong>in</strong> San Diego <strong>in</strong> a way that<br />
had never been done before.<br />
PROGRESS & ACCOMPLISHMENTS<br />
Today, <strong>the</strong> San Diego RCFL is an established<br />
entity and a respected member of <strong>the</strong> area’s<br />
law enforcement community. With over forty<br />
law enforcement agencies <strong>in</strong> its service area,<br />
<strong>the</strong> San Diego RCFL received 707 requests<br />
for service <strong>in</strong> FY 2003, which <strong>in</strong>volved approximately<br />
34 terabytes of data. Of those<br />
requests, <strong>the</strong>y performed 590 exam<strong>in</strong>ations<br />
and participated <strong>in</strong> 117 search and seizure<br />
operations.<br />
Even with an <strong>in</strong>creas<strong>in</strong>g caseload, <strong>the</strong> San<br />
Diego RCFL cont<strong>in</strong>ues <strong>to</strong> place great importance<br />
on support<strong>in</strong>g <strong>in</strong>vestigations <strong>in</strong> a more<br />
timely and efficient manner. In FY 2003, <strong>the</strong><br />
San Diego RCFL made several operational<br />
enhancements, which resulted <strong>in</strong> a reduction<br />
<strong>in</strong> its average process<strong>in</strong>g time of service<br />
requests. Specifically, eighty-n<strong>in</strong>e percent<br />
of <strong>the</strong> service requests were completed <strong>in</strong><br />
90 days or less, compared with 81% for <strong>the</strong><br />
previous year.<br />
Ano<strong>the</strong>r highlight for FY 2003 was <strong>the</strong> addition<br />
of a full-time network eng<strong>in</strong>eer. This<br />
position was established <strong>to</strong> better manage<br />
and ma<strong>in</strong>ta<strong>in</strong> all <strong>in</strong>ternal computer systems<br />
and networks, and <strong>to</strong> improve <strong>the</strong> operational<br />
workflow of <strong>the</strong> lab. By hav<strong>in</strong>g a full-time<br />
network eng<strong>in</strong>eer on staff, <strong>the</strong> lab was able <strong>to</strong><br />
dedicate more resources <strong>to</strong> research and development<br />
efforts. As a result, this streng<strong>the</strong>ned<br />
<strong>the</strong> staff’s ability <strong>to</strong> address constantly<br />
chang<strong>in</strong>g technologies, and enhanced <strong>the</strong>ir<br />
overall capability and performance dur<strong>in</strong>g<br />
FY 2003.<br />
CHALLENGES AHEAD<br />
Dur<strong>in</strong>g FY 2004, <strong>the</strong> San Diego RCFL will have<br />
marked its fifth anniversary. Direc<strong>to</strong>r Bolelli<br />
rema<strong>in</strong>s committed <strong>to</strong> ensur<strong>in</strong>g a cont<strong>in</strong>uously<br />
high level of quality control and efficiency<br />
for <strong>the</strong> lab.<br />
Specific goals for FY 2004 <strong>in</strong>clude:<br />
• Increas<strong>in</strong>g regional participation <strong>to</strong> a level<br />
that <strong>in</strong>cludes at least twenty computer<br />
Forensic Exam<strong>in</strong>ers.<br />
• Establish<strong>in</strong>g a more formalized Local Executive<br />
Board<br />
• Implement<strong>in</strong>g an au<strong>to</strong>mated Evidence<br />
Track<strong>in</strong>g and Case Management System<br />
• Explor<strong>in</strong>g nationally recognized labora<strong>to</strong>ry<br />
accreditation and/or certifications for <strong>the</strong><br />
San Diego RCFL.<br />
19