Forensic computer investigative experts at CyanLine, a company committed to the prevention, detection and investigation of cyber crimes, announced that its new Fast Disk Acquisition System (FDAS) uncovers critical evidence not found in other systems that can make or break a case. Revealing vital metadata, or ‘data about data,’ from the disk controller, FDAS finds the number of times a device was turned on and the amount of hours its been used.
“The discovery of this new information can be utilized in nearly every case that uses forensic computer images as evidence,” said Steven Branigan, CyanLine CEO, Secret Service committee member and FDAS inventor. “The information from FDAS can be used to confirm or overturn cases, if the metadata aligns with their claims.”
The metadata unveiled with FDAS sealed the deal in a recent court case. After examination with FDAS, investigators discovered that the drive was in use for about 20 hours, which appeared substantially low for a three-year-old computer. Investigators used this information to prove that the suspect obtained a new drive and only copied bits of ‘evidence’ he wanted investigators to see.
“FDAS helped us realize there was critical evidence about the computer disk itself that we do not typically receive from investigators,” said Barbara Rudd, Research Director at Alexander Toia & Company, LLC, a Licensed Private Investigation agency. “I was not only able to get a favorable settlement for my client, but I also realized the significance of this extra data that I didn’t even know existed.”
Branigan believes the chief problem in forensic computer cases is that lawyers and investigators are unaware that bonus metadata exists, nor realize that suspects will conceal evidence by replacing their disk drives. “FDAS not only provides a faithful copy of the evidence disk, but it also provides information about the disk drive itself. It is this data can be used to determine age and usage of the disk,” Branigan explained.
Attorneys and investigators can now use FDAS to verify that the data being reviewed is the correct data.
“Successfully prosecuting a case turning on Electronically Stored Information (ESI) is about relating a true and accurate fact pattern,” said Michael Hoffman, Esq., of Pennington, New Jersey. Hoffman believes that forensics is about the truth and accuracy of that fact pattern and that litigants need the ‘rock-solid’ evidence specific to electronically stored information. FDAS is the tool that can remove fear, uncertainty and doubt in the mind of the trier by effectively comparing metadata to the characteristics of the computer.
More cases can be closed faster with FDAS, the only forensic computer imaging system that reports essential metadata. For more information, visit www.cyanline.com.
About CyanLine
Based in New Jersey, CyanLine serves both the victims of high-tech cyber crime, as well as the law enforcement agencies that pursue perpetrators, and helps individuals, companies, and agencies acquire top-of-the-line network security. Steve Branigan is an experienced forensic scientist and licensed private investigator. Renowned speaker and instructor, Branigan is an active member in the High Technology Crime Investigation Association (HTCIA), Federal Bureau Investigation’s Infragard, New Jersey License Private Investigators Association, and on the Digital Forensics Certification Board. Branigan is the author of High Tech Crimes Revealed and recently published an article in the Journal of Forensic Sciences. With experience in domestic and international cases, Branigan has received awards from the U.S. Secret Service and New Jersey State Police.
