Category:

Blog

Forensic Witness – Send File Request

Forensic Witness – Send File Request

by robAdmin

Transforming Field Investigations While Maintaining Evidence Continuity

Forensic Witness streamlines the process of forensically collecting files from various individuals, including::

  • Witnesses
  • Property Representatives
  • Victims
  • Suspects


Each request sent and submission received is automatically logged in your electronic notebook, ensuring a continuous evidence chain.

Forensic Witness File Request
Forensic Evidence Transfer
Play Video

Video: Why you need Forensic Witness in 40 seconds.

Exploring Forensic Witness: An In-Depth Guide

Learn about the inspiration and driving forces behind the development of Forensic Witness

For more information, visit:

https://www.forensicnotes.com/forensic-witness/

Extends Person Entities

Forensic Witness aims to acquire electronic files and information from witnesses, property representatives, and others, thereby enriching the ‘Person Entity’ feature of Forensic Notes.

Before initiating a File Request, you must first create a ‘Person Entity’ using a cellphone number or email address. The File Request is then dispatched via SMS or Email, depending on your chosen method of communication.

For further details on how to create ‘Person Entities’, please visit: Entities – Add Person

Initiate a File Request (Forensic Witness Request)

To start, navigate to the ‘Note Options’ menu for your entity.

Send Forensic Witness Request

Before sending the request via Email or Text Message (SMS), you can add a personalized note to it.

Send Forensic Witness File Request Form

Witness Receives an Email or Text Message

The witness will receive your request promptly, containing clear instructions to click the provided link and upload any files pertinent to the investigation.

Forensic Witness - Email Request

Once the witness clicks on the link, they will be directed to an upload form.

Investigator's Perspective

The investigator will be promptly notified once the witness receives the request, which contains clear instructions to click on the provided link and upload any files relevant to the investigation.

Forensic Witness - Request and Submission Documented
File Submission Attachments
Forensic Witness - Submission Report - Full and Redacted

Empower Your Investigations with Forensic Witness

The process is seamless, secure, and designed to save valuable time, making Forensic Witness an invaluable tool for any investigation.

Not a Member? Sign Up Now!
AI – Voice to Text

AI – Voice to Text

by robAdmin

Transforming Field Investigations

Investigations require detailed and accurate documentation, but sometimes taking notes can be dangerous, especially when you are out in the field and need to be aware of your surroundings/

What if you could bypass these challenges and make note-taking safe and easy?

Enter Forensic Notes’ AI Voice-to-Text feature, designed to help investigators rapidly capture critical information while keeping their eyes on the situation being investigated. 🚀

AI Tools – Overview

View highlights of all the incredible
AI-Powered Tools added to Forensic Notes. 

View

Transform Speech into Polished Notes with AI

Unlock the power of AI with our Voice-to-Text feature, instantly turning your spoken words into clear, concise, and professional notes, no matter your accent or surroundings.

Our cutting-edge technology filters out verbal stumbles and filler words, ensuring your notes are always polished and easily understood—saving you time and effort.

Boost Efficiency in Investigations with AI Voice-to-Text

Embrace AI Voice-to-Text to quickly create detailed notes without typing, even on mobile devices.

Stay aware of your surroundings while improving collaboration, as supervisors and team members can easily understand your notes.

This feature seamlessly bridges language barriers, making teamwork smooth and effortless during investigations.

How to Use

To start, click on the “Add Advanced Notes” option. ( + icon)

Voice-to-Text Transcriber

The recorder will start automatically.

Speak your thoughts clearly, and watch as the AI transforms your words into professional, easily understandable text. It’s that simple! 🎉

Voice-to-Text In Action!

The Voice-to-Text Converter seamlessly transcribes spoken words into professionally crafted written notes and translates most languages into English, including those with heavy accents.

This ensures a professional and polished note every time.

German Translastion & Transcription to English

I interviewed witness Jason Jackson (DOB 01/18/1989) who observed the assault. Suspect was wearing dark jogging pants, white shoes, and a black shirt with skulls on the front. Suspect struck the victim in the back of the head and fled southbound. Suspect had dark hair. Jackson can be contacted at 778-555-3223 or JasonRocks@gmail.com.

Transforming Cluttered Voice Notes into Refined, Concise Notes

Our Voice-to-Text Converter intelligently eliminates filler words and transforms disorganized statements into clear, concise, and professional notes that are easy to read and comprehend.

As the video below demonstrates, you can review and edit the AI-generated note to ensure its accuracy and alignment with your original thoughts. Experience refining your voice notes seamlessly with our innovative AI-powered feature.

Umm… so like I spoke with ahhhh a witness who said, who said he saw the assault take place, but uh, ummmm. His name was Jason Jackson and ah born in 1989 and um..oh January 18th. Anways, he was like the guy assaulting was wearing dark jogging pants and bright white shoes. He ran southbound away after punching the dude in the back of the head. Like super hard. Ummm, he also said he had a shirt with... with skulls on the front, ah black in color. We can contact ummmm…. Jason at 778-555-3223 or email him at jasonrocks@gmail.com. Umm, oh yeah, he said he also had dark hair. Yah, that’s it.

Pro Tips

  1. Speak clearly: For the best transcription results, enunciate your words and maintain a steady pace.
  2. Minimize background noise: Choose a quiet environment when possible, but if you’re in a noisy spot, place the mic close to your mouth and speak louder.

Empower Your Investigations with AI Voice-to-Text

Discover the future of note-taking and documentation with Forensic Notes’ AI Voice-to-Text feature! Bid farewell to struggles with mobile typing, language barriers, and heavy accents. This potent tool enables investigators to concentrate on the situation while capturing essential information effortlessly. 💥

What’s more, supervisors and collaborating investigators will appreciate the clear, concise, and professional text produced, ensuring seamless communication and teamwork. 🤝

It’s time to elevate your investigations and harness the transformative power of AI. With Forensic Notes’ AI Voice-to-Text feature, you’ll be a force to be reckoned with, conquering documentation challenges and propelling your investigations to new heights of success. 🌟

Not a Member? Sign Up Now!
Digital Forensic Images

How to Become a Digital Forensics Professional in 2023

by Michael Post
Digital Forensics

In this captivating article, we’re diving headfirst into the exhilarating world of Digital Forensics.

We’ll explore the smorgasbord of career paths and opportunities that await those eager to make their mark in this ever-expanding field. Digital Forensics professionals boast an impressive array of skills and responsibilities, coming from all walks of life.

These digital sleuths often go by a variety of titles, such as:

  1. Digital Forensics Investigator
  2. Digital Forensics Analyst
  3. Digital Forensics Examiner
  4. Digital Forensics Professional

 

Now, in the realm of law enforcement, there’s a subtle distinction between a Digital Forensic Investigator and a Digital Forensics Analyst. It all boils down to whether they’re a badge-wielding officer or a whip-smart civilian in their organization.

Venture into the private sector, and you’ll find a veritable buffet of job titles, including:

  1. Digital Forensics Consultant
  2. Digital Forensics Engineer
  3. Digital Forensics Technician
  4. Digital Forensics Specialist

Oh, and just to keep things interesting, sometimes you’ll see “Computer Forensics” used in place of “Digital Forensics.”

You might’ve also stumbled upon the acronym DFIR during your digital travels, which stands for Digital Forensics and Incident Response. Sure, it’s a popular term, but let’s set the record straight: Digital Forensics and Incident Response are, by and large, two separate and unique positions.

So, buckle up, folks, as we zero in on the Digital Forensics side of DFIR in this riveting article.

Digital Forensics – Is This the Career Path for You?​

Before jumping into the fascinating world of Digital Forensics, take a moment to ponder:
  1. The nitty-gritty of working in computer forensics
  2. The must-have skills and abilities to thrive
  3. Educational prerequisites
  4. Starting salaries
  5. And so much more.
Though there’s plenty to mull over, remember that there’s no one-size-fits-all approach to breaking into this field. Sure, a degree in computer-related fields (or even specialized computer forensics programs) and a few shiny certifications might give you an edge. But hey, they’re not set in stone. Got a degree in criminal justice, psychology, engineering, or biology, and no certificates to your name? No worries! You can still make it big in the world of Digital Forensics. Just be prepared to be a relentless, self-motivated learner. And let’s not forget – in this game, a diverse mix of life and work experiences is worth its weight in gold.

Climbing the ladder in Digital Forensics?

Hone these essential skills:

  1. Documenting evidence, adhering to processes, and crafting top-notch reports
  2. Mastering investigation and ace personal interviewing techniques
  3. Polishing written, verbal, and interpersonal communication skills
  4. Developing a keen eye for detail and following rules, guidelines, and processes like a pro
  5. Showcasing presentation skills to break down technical jargon for non-technical folks
  6. Building a solid understanding of domestic, local, and international laws

In the thrilling world of computer forensics, there’s always a demand for professionals with the chops to examine digital media, identify, recover, analyze, and present facts with unwavering conviction.

Your verbal and written prowess will take center stage, as you might find yourself under the spotlight in a court of law, captivating the attention of judges and juries alike.

The global digital forensics market size reached US$ 5.8 Billion in 2022. Looking forward, IMARC Group expects the market to reach US$ 10.9 Billion by 2028, exhibiting a growth rate (CAGR) of 9.9% during 2023-2028.

Source: https://www.imarcgroup.com/digital-forensics-market

Why wait when the thrilling realm of Digital Forensics beckons?

Boundless opportunities are ripe for the picking if you’re game to invest time and energy.

So, without further ado, let’s dive deeper and discover what lies ahead…

The Lowdown on Computer Forensics

Computer forensics is a riveting subset of forensic science.

This exhilarating field harnesses investigative prowess and razor-sharp analysis to unearth evidence lurking in computers, and more often than not, mobile devices.

The goal?

To piece together the puzzle, pinpoint the culprit, and as one esteemed DF investigator quipped, “Place the Suspect Behind the Keyboard.” (~ Brett Shavers)

Interested in learning “How to Place the Suspect Behind the Keyboard” ? 

Then we recommend you sign up for DFIR Training.

Aim High: The Goal of Computer Forensics

Computer forensics strives to collect, scrutinize, and preserve evidence from digital media in a manner fit for the courtroom.

Typical job duties can include:

  1. Investigating policy breaches, hacks, leaks, and corporate compliance
  2. Probing sexual assaults, murders, and violent acts (in law enforcement)
  3. Documenting evidence, crafting reports, and briefing findings
  4. Communicating investigation results with case managers and supervisors
  5. Analyzing forensic evidence and drawing conclusions
  6. Conducting witness interviews and testifying in court (if necessary)
  7. Offering technical guidance and policy recommendations

Digital media prime for examination includes:

  1. Personal & work computers
  2. Smartphones & mobile devices
  3. Flash drives
  4. Tablets
  5. Cloud storage, and more.

In today’s hyper-connected world, crucial evidence is often unearthed from mobile devices.

These pocket-sized gadgets can hold:

  1. Chat conversations
  2. GPS locations
  3. Phone call logs
  4. Documents
  5. Photos
  6. Videos

The real challenge with mobile devices?

Gaining forensic access to the treasure trove of data within.

Mobile devices often deploy intricate encryption, hindering or severely restricting examiners’ access to the data. Even possessing the device’s password won’t necessarily grant full access – you might only view the data but not extract it in a forensically sound manner.

In the ever-evolving landscape of technology, security, and privacy laws, staying on your toes is the name of the game for computer forensics professionals.

For instance, in some regions, strong-arming a suspect into revealing their passwords could render the obtained information inadmissible in court. On the flip side, other regions might compel the suspect to cough up their password or risk facing additional criminal charges.

Crafty suspects could play along, providing a password to one encrypted container, while the actual incriminating material stays tucked away in another container, unlocked by a different password and hidden from the prying eyes of law enforcement.

In such scenarios, your technological prowess, understanding of encryption, and grasp of the capabilities and limitations of forensic software tools become indispensable.

In today’s high-stakes world of criminal investigations, the expertise of a computer forensic professional is often the key to cracking the case wide open.

From murder to fraud, sexual assault to child abduction, and even motor vehicle accidents, digital forensics is instrumental in unearthing clues that shed light on the crime, the perpetrators, and their motives.

The evidence could be:

  1. A file on a computer
  2. A message from a phone chat app
  3. Geolocation data from a cloud account
  4. Logs from a vehicle’s infotainment system

Pursuing a forensic degree equips you with the skills and processes needed to excel in the field. And obtaining forensic certifications takes you a step further, delving into the nitty-gritty of forensic software.

Forensic certifications often hold sway in the courts, lending credibility to the testimony of Computer Forensic Examiners.

In many cases, the prosecution or defense might want the Computer Forensic Examiner to be designated as an “expert witness,” allowing them to offer opinion evidence that transcends mere facts. In these situations, it’s crucial that you, as a digital forensics professional, are not only knowledgeable and precise but also keenly aware of the boundaries of your expertise.

Expert Witness Testimony Interview with Jonathan W. Hak, Q.C.

 

Potential Employers

Public Sector Employers

Digital forensics offers a diverse range of job opportunities in both the public and private sectors.

In the public sector, law enforcement is probably the most prominent employer, boasting high-profile positions for digital forensic examiners.

This extends beyond local, state, or federal police services to encompass other enforcement agencies such as customs, tax enforcement, and the military.

While many law enforcement positions are occupied by sworn police officers, some organizations also hire civilians to perform digital forensic analyses.

Sworn officers who take on digital forensics roles undergo extensive training, equipping them with the skills to become top-notch examiners for criminal investigations.

Though the training represents a significant investment, the hands-on investigative experience officers bring to the table is invaluable when crafting forensic reports for court proceedings.

Moreover, sworn officers and military personnel often receive lower pay than their civilian counterparts, translating into additional cost savings for these agencies.

Private Sector Employers

Not all computer forensic professionals don the uniforms of military or law enforcement.

It’s becoming increasingly popular for big and small corporations to bring computer forensic experts on board to investigate various issues. Such scenarios may involve allegations of employees or contractors stealing or leaking sensitive information like customer data (sometimes dubbed corporate espionage).

In today’s fast-paced digital world, forensics experts might be called to probe cyber breaches or ransomware attacks. In these cases, they’ll be part of the Incident Response (IR) team.

Large corporations may offer higher salaries to computer forensic experts to secure their loyalty. Consequently, a forensic examiner with limited private sector experience could earn significantly more than a seasoned computer forensic expert in government service.

Regardless of the job setting, a computer forensics professional’s primary responsibility is to carry out structured investigations using skills and techniques acquired from forensic training while documenting their work to ensure admissibility in court.

Writing and speaking clearly about your work is a critical aspect of a computer forensic examiner’s role.

Your audience – your supervisor, investigator, judge, and jury – may possess limited computer knowledge. However, they will make crucial decisions based on your work and, more importantly, your ability to articulate your actions.

Without the capacity to explain your work coherently, your degree and certifications might not take you far in your career or could result in lost civil and criminal cases.

Study

Education & Schooling

Pursuing higher education and obtaining a degree in computer forensics is almost always beneficial. Some sources suggest that computer forensics professionals with a degree earn nearly twice as much as those with only forensic certifications and no degree.

Most employers will prefer you to have a bachelor’s degree in forensic science, computer science, criminal justice, or another related field.

The advantage of holding a bachelor’s degree and certifications is that it can make you stand out from the competition and be more attractive to potential employers.

However, don’t worry; there are plenty of job opportunities in the forensics field for those who only possess a forensics certification (especially if you are in law enforcement).

If you’re interested in pursuing a post-secondary degree or certificate, the following digital forensic programs can help you on your journey:

Post-Secondary Institutions

Certifications

Some well-known forensic certifications include the following:

  • CISA – Certified Information Systems Auditor
  • CISSP – Certified Information Systems Security Professional
  • CCE – Certified Computer Examiner
  • CFCE – Certified Forensic Computer Examiner
  • GIAC – Global Information Assurance Certification
    • GIAC Certified Forensic Analyst (GCFA)
    • GIAC Advanced Smartphone Forensics (GASF)
    • GIAC Certified Forensic Examiner (GCFE)
    • GIAC Network Forensic Analyst (GNFA)
    • GIAC Reverse Engineering Malware (GREM)
    • GIAC Security Essentials (GSEC)

Forensic Software Vendor Training and Certificates can also be beneficial.  Some examples include:

  • ACE – AccessData Certified Examiner
  • BelkaCE – Belkasoft
  • EnCE – EnCase Certified Engineer
  • Cellebrite
    • Cellebrite Certified Operator (CCO)
    • Cellebrite Certified Physical Analyst (CCPA)
    • Cellebrite Certified Mobile Examiner (CCME)
  • XRY  – XRY Certification
  • X-PERT – X-Ways Professional in Evidence Recovery Techniques
  • BlackBag Technologies
    • Certified Blacklight Examiner (CBE)
    • Certified Mobilyze Operator (CMO)
    • Mac and iOS Certified Forensic Examiner (MICFE)

Other certificates you may also consider, that provide a more general computer foundation are:

  • CompTIA A+
  • CompTIA Network+
  • CompTIA Security+

Certification courses are typically short courses, often less than 10 classes.

Each certification course has their own requirements and can include professional time spent in a forensics related field.

It’s best to research each certification you’re planning to take to ensure you meet the requirements before deciding to take it.

Expected Starting Salary & Benefits

The starting salary for a computer forensics professional depends on various factors, including whether you’re employed in the public or private sector.

Possessing an associate degree can boost your forensics salary and make job hunting more manageable.

Having both a forensics degree and at least one forensics certification makes you more appealing to employers and allows you to compete effectively with other computer forensic professionals.

Piggy Bank

While obtaining certifications might seem like a daunting task, in the long run, it contributes to better job security and potentially a higher salary.

Salary Potential

As with any job, your salary highly depends on your geographic location and employer.

Salaries in the United States
There is a large range of salaries in the US.
The average Forensic Computer Analyst in 2023 makes $75,525 / year (or $37.76 an hour).
On the high end you can expect to make up $129,000 / year (approx. $64.50 an hour).
On the lower end salaries can start at $55,000 / year (approx. $27.50 an hour).

(Source: Payscale.com )

Salaries across Canada
Across Canada wages are very competitive.  Municipal Law Enforcement has advertised civilian positions with approximately hourly rates. $34.00 – 55.40 per hour (based on 2017 pay scales).
This breaks down to approximately $70,500 – $115,000 / year.

It's Time

If the fascinating world of digital forensics piques your interest, if you’re driven to help solve crimes, uncover compromised computer systems, or catch rogue employees, then don’t hesitate – now is the perfect moment to start preparing.

A wealth of job opportunities are available, and the salaries are generally quite competitive compared to other fields.

Kick off your journey by learning independently, enrolling in courses, earning certifications, and applying for positions.

Digital forensics is an exhilarating and demanding field, but with time and effort, you can make a meaningful impact.

The desk of a computer forensic analyst

How to Become a Forensic Video Analyst in 2023

by Michael Post
The desk of a computer forensic analyst

If you’ve ever found yourself immersed in crime scene investigation shows on television, you may already have some familiarity with the role of a Forensic Video Analysis expert.

While these shows often dramatize the work for entertainment purposes, forensic video analysis is an essential and growing field that plays a significant role in solving crimes today.

The widespread use of smartphones and the increasing number of security cameras mean that more incidents are being captured on video than ever before, presenting opportunities and challenges for law enforcement agencies.

The sheer volume of video evidence can overwhelm law enforcement, as they must efficiently store, process, and review vast amounts of footage to uncover crucial information.

Moreover, digital video is more complex than it appears at first glance. Without proper forensic analysis, the public, law enforcement, and the courts should not accept video evidence at face value, as numerous factors can influence its interpretation.

From recording methods to color calibration of monitors, these factors can significantly impact what people see and how they interpret the video, potentially leading to erroneous conclusions about the events captured.

If you have a passion for uncovering the truth and assisting others through video analysis, a career in forensic video analysis could be a perfect fit for you. Read on to learn more.

What is Forensic Video Analysis?

According to LEVA.org: “Forensic Video Analysis is the scientific examination, comparison and/or evaluation of video in legal matters.”

For a video or audio recording to be used in legal proceedings, it must first be authenticated and verified to ensure that the evidence is genuine and suitable for court purposes.

A forensic video analyst must also determine which facts or pieces of evidence are relevant to the case while possessing a deep understanding of evidence handling and technical expertise.

In this field, critical thinking skills are just as essential as technical knowledge. Forensic video professionals may hold various job titles, with Forensic Video Analyst (FVA) and Forensic Video Technician (FVT) being the most common.

The camera cannot lie, but it can be an accessory to the untruth”

~ Harold Evans

Why is Forensic Video Analysis Important?

Have you ever heard the expression, “The camera cannot lie”?

The truth is, the way video and images are captured can dramatically impact how people interpret what they see, often leading to incorrect conclusions.

Forensic video analysts are essential when any videos or images are submitted as evidence during a trial.

Today’s market offers a vast array of camera makes and models, including dedicated digital photography cameras, action cameras (e.g., GoPro), smartphones, and security system cameras.

File formats and settings for recording video can vary, such as frames per second (fps) or video resolution.

All these factors can influence how and what video information is stored. A forensic video analyst must understand these nuances to prevent misinterpretation of what a video appears to show, such as color discrepancies or the speed at which events unfold in the video. In a criminal case, where a video could be crucial in proving someone’s innocence or guilt, these factors can be of utmost importance.

Consider these examples:

 

Color Distortion

One of the most famous examples of how images can be deceptive is the viral photo of “the dress” in 2015. What was unique about this image was that people were strongly divided on whether the dress was “white and gold” or “black and blue.”

This phenomenon is generally not the norm, as a camera may affect how the image appears, but most people still agree they see the same colors.

Nevertheless, this instance serves as a useful reminder of the importance of carefully assessing and examining an image before trusting it.

AI (Artificial Intelligence) – Generated Content and Deepfakes

With advancements in AI, the creation of manipulated or entirely generated content, such as deepfakes, has become increasingly prevalent.

Deepfakes are videos or images that have been convincingly altered using AI algorithms to make it appear that someone said or did something they never actually did. These manipulated videos can be difficult to detect, posing challenges for forensic video analysts as they distinguish genuine evidence from falsified content.

Analysts must now stay updated with the latest AI-generated content detection techniques and tools to ensure the authenticity of the evidence they examine.

The continued development of AI also offers new possibilities for enhancing video analysis, such as automating the process of identifying and tracking objects or people within a video.

We’ll explore this exciting topic in more detail in a later article.

Frame Rates

One crucial aspect of video is the frame rate, which is measured in frames per second (FPS). Standard frame rates include 30 or 60 FPS. However, the FPS may not always remain consistent and can fluctuate throughout the duration of video footage.

When the FPS dips, our brains subconsciously fill in the blanks, and we are unlikely to notice the change. Fortunately, with 30 FPS or higher, a dropped frame doesn’t make a significant difference. However, with low frame rates found in many CCTV recorders that may use only a few FPS, a lost frame can lead to faulty conclusions about what we observe.

For instance, if a video has an FPS of 5, and the recording dips for a second or two to 1 FPS, our brains will attempt to fill in the blanks, causing the action to appear to increase in speed.

Learn more about frame rates at https://ipvm.com/reports/frame-rate-surveillance-guide

Compression

Digital video technology is vastly different from how video was stored on film. When digital video is recorded, techniques are employed to reduce the size of the video file created – this process is referred to as compression.

One method to compress video is the use of reference frames. For example, a video might take one reference frame for every 30 frames. This reference frame captures everything the camera lens sees. Then, for the next 29 frames, the software only captures data where it detects a change from the reference frame.

For instance, if a person is walking in the top corner of the video, only the portion where change is detected in the following 29 frames is stored, while the rest of the image for each frame is sourced from the reference frame.

Of course, software is not perfect, and if the camera software does not detect the person’s movement, those frames will give the effect that the person never moved.

These are just a few examples of the complexities surrounding video.

Forensic Video Analysts are therefore vital in analyzing video and ensuring that individuals receive a fair trial when video evidence is used.

Forensic Video Clarification

AI-Enhanced Plate

Video clarification might be people’s most common idea when they think of video forensics.

In TV shows, video forensics is often depicted as identifying an impossible-to-see license plate on a car or the face of someone reflected off an object.

While Forensic Video Analysts and Technicians can achieve impressive results, it’s crucial to remember that some of what is shown on TV is mere “TV Magic” and not reality.

Thankfully, there are numerous excellent software products available to remove unwanted sound or noise and enhance the desired sound or video footage vital to a trial.

Additionally, forensic video analysis isn’t solely about video. Often, photos are needed, whether for court or for creating bulletins to be sent out to law enforcement members or the public.

One example is obtaining a still image (a single frame) of an unknown suspect captured in a surveillance video. This image (or images) can then be distributed to the police or public to request help identifying the individual.

It’s vital to remember that any forensic video analysis must be documented appropriately.

After verifying video evidence and enhancing elements for greater clarity, and documenting all your work, the most critical task still awaits:

Testifying in court!

Testifying & Preparing Reports

As a Forensic Video Analysis Expert one of the most valuable services a forensic video professional can offer is testifying in court.

Although testifying may not always be necessary, it’s not uncommon for attorneys to question the validity of the video evidence.

You must be prepared and ready to speak about your actions when handling or editing the video. 

This might include:

  1. Steps in the Chain of Custody of Evidence
  2. Software used in analyzing video
  3. Any modifications (enhancements) you made to the video
  4. Possibly providing an “expert” opinion on video evidence

Testifying can indeed seem like a daunting task, and it’s likely that the first few times it will be.

The key is not only to be knowledgeable but also to be able to express that knowledge in terms that the judge and jury can understand.

However, it’s worth noting that in many cases, both criminal and civil, cases are often settled before reaching the point where you would have to take the stand.

Court

However, for your cases to reach a successful conclusion without your testimony, it will often rely on you to prepare accurate and comprehensible reports.

Learning to present the facts in a way that’s easy for everyone to understand requires critical thinking and problem-solving skills.

Developing a method for writing reports is crucial to your evidence being used accurately in court.

 

Expert Witness Testimony Interview with Jonathan W. Hak, Q.C.

How do you prepare to be a Forensic Video Analyst?

Education and Experience

It’s never going to hurt to have post-secondary education.

While we aren’t currently aware of any bachelor’s degree dedicated solely to the field of forensic video analysis, there are several more general forensic programs available, some of which offer specific forensic video courses.

When it comes to acquiring specific skills, many public sector employers (such as law enforcement) will provide the specialized training required to become a forensic video analyst.

Therefore, the value of a post-secondary education lies more in gaining exposure to critical thinking and writing skills, which will be required and beneficial for truly succeeding in this field.

Securing a forensic video analyst or technician position, like most jobs today, is competitive. Lacking post-secondary education could put you at a disadvantage.

As a significant number of jobs in this field are with law enforcement, one of the most important approaches is to become familiar with law enforcement agencies themselves.

The best education for this is “on-the-job training.” Volunteering or even applying to other positions within the organization can be crucial for gaining knowledge and experience about working in a law enforcement environment.

This also contributes to networking, which we discuss later in the article.

Keep in mind that if you hope to be employed with a law enforcement agency, your integrity and behavior in your personal life will likely be reviewed.

Past academic misconduct (cheating/plagiarism) may prevent you from getting a job.

In this sense, how you obtain your education is as important as what you get your education in.

If you want to pursue education and training related to Forensic Video Analysis, here are some options for 2023.

Post-Secondary Institutions

USA

Marshal University
Offers a graduate certificate designed to provide knowledge and skills for the identification, collection, preservation, and examination of various types of digital evidence. This includes topics from digital forensic analysis policy, and procedure, forensic analysis tools and techniques, as well as quality assurance, legal, and ethical considerations.  The program does not require the applicant have any experience in the field of digital forensics.

Learn more about: The Graduate Certificate in Digital Forensics

 

The University of Colorado Denver (National Center for Media Forensics)
Offers perhaps one of the specific and directly related to forensic video  programs available. Presented in a hybrid format combining mostly online learning with a small portion of concentrated in-person classes within a two-year cohort curriculum. This format allows for students to work full-time while pursuing the degree.

Learn more about: Master of Science in Recording Arts emphasis in Media Forensics

 

NU (National University)
Though they do not offer a specific forensic video program, NU offers a graduate certificate that can be completed relatively quickly online or on campus.

Learn more about: Graduate Certificate in Forensic and Crime Scene Investigations

Canada

BCIT (British Columbia Institute of Technology)
There are several part-time Bachelor of Technology (BTech) and Advanced Certificate program options to choose from as well as a wide range of professional development workshops offered throughout the year. Two options that offer forensic video courses are:

Training (Highly Recommended)

Jonathan W. Hak, Q.C. (Expert Instructor)
World-renowned instructor for:
Courtroom Testimony for Expert Witnesses & Forensic Video Legal Analysis

Jonathan is a distinguished barrister, solicitor, and law lecturer with over 30 years of experience. He actively engages in research and writing about the law concerning the use of video evidence in criminal prosecutions and in the training of forensic video analysts from the United States, Canada, the United Kingdom, and other countries. Moreover, he provides training to lawyers on the subject of forensic video analysis law.

Since 2000, Jonathan has been the principal legal instructor for the Law Enforcement and Emergency Services Video Association International Inc. (LEVA), where he has presented at the FBI Academy in Quantico, Virginia (2000-2004), and at various other locations in North America and the United Kingdom.

Jonathan has also developed a dynamic and highly practical course on Courtroom Testimony for Expert Witnesses in any field of expertise. Since 2006, this course has been presented online across the United States, Canada, and globally.

To learn more about Jonathan W. Hak and the excellent training he provides, visit:
https://www.jonathanhak.com/

To see current course offerings:
https://www.jonathanhak.com/category/courtroom-testimony-course

Jonathan Hak Q.C.
Instructor on Expert Witness Testimony

Read the Interview
Robert Merriott (founder of Forensic Notes), had the opportunity to interview Jonathan and delve into the importance of note-taking for Expert Witnesses.

Read it at: Expert Witness Testimony Interview with Jonathan W. Hak.

Rob Profile
Rob Merriott
Founder of
Forensic Notes
Jonathan Hak Q.C.
Instructor on Expert Witness Testimony
Rob Profile
Rob Merriott
Founder of
Forensic Notes

Read the Interview
Robert Merriott (founder of Forensic Notes), had the opportunity to interview Jonathan and delve into the importance of note-taking for Expert Witnesses.

Read it at: Expert Witness Testimony Interview with Jonathan W. Hak.

Associations

There are also a number of non-profit groups and vendors that offer certification and specific training on their products.

LEVA (Law Enforcement & Emergency Services Video Association)
Established in 1989, LEVA is nonprofit corporation committed to provide advanced training and certification in the science of forensic video analysis. LEVA serves as a key resource providing opportunities for professional development through quality training and informational exchange.
LEVA offer two certifications: Certified Forensic Video Analyst (CFVA)  &  Certified Forensic Technician (CFVT).

It is important to note, that many Forensic Video Analyst (FVA) and Forensic Video Technician (FVT) positions in North America specifically require LEVA certification.

Learn more at: https://leva.org/

IAI (International Association of Identification)
According to the IAI the oldest and largest forensic association in the world. The forensic association represents a diverse, knowledgeable and experienced membership that are assembled to educate, share, critique and publish methods, techniques and research in the physical forensic science disciplines.
As a member, you can apply to become a Certified Forensic Video Examiner.

Learn more at: http://theiai.org/forensic_video.php

NATIA (National Technical Investigators Association)
Offers the option to become a Certified Technical Investigator (CTI). A CTI has demonstrated a basic knowledge of audio, video, electronics, tracking, and telephony.
It should be noted that Membership in NATIA is restricted to full-time employees of law enforcement and military agencies who are actively engaged in technical surveillance, communications, and specialized support of the agencies by which they are employed.

Learn more at: https://www.natia.org/certification/

Vendor Certification / Training

iNPUT-ACE (maker of forensic video software)
Offering both live online and on-demand training; including a number of certification tracks.

Live Online Training options include:

iNPUT-ACE Operator Certification (IAOC)
2-Days of Entry-Level Instruction
Learn more at: https://input-ace.com/online/operator/

iNPUT-ACE Examiner Certification (IAEC)
2-Days of Advanced Instruction
Learn more at:  https://input-ace.com/online/examiner-2/

iNPUT-ACE Metrology Certification (IAMC)
2-Days of Specialized Instruction
Learn more at:  https://input-ace.com/online/metrologist-2/

On-Demand Training:

Offering 10 different lessons from 10 different experts in the field of video investigations and is eligible for CEU credits. 

The first lesson is currently free and taught by Grant Fredericks,  a former police officer with over thirty years of experience leading video-centric criminal investigations. He is a Certified Forensic Video Analyst and a contract instructor at the FBI National Academy in Quantico, VA.

Learn more at: https://input-ace.com/online-training-symposium-3/

Ocean Systems (maker of forensic video software)
Offering a number of courses as short as 4 hours (online) up to 5 days.

  • Forensic Video Analysis – FVA 101 (5 Day)
  • Fundamentals of Video Evidence Recovery & Processing (3 Day)
  • DVR Assessment & Video Recovery (2 Day)
  • Image Clarification & Processing w/ClearID – (4hrs, On-line)

Learn more at: https://www.oceansystems.com/training/training_overview.php

Know of a great Forensic Video Analysis Training or Products ?

Let us know and we will happily add it to this article.

Other Skills & Aptitude

Having a specific education is not enough to become a successful forensic video professional. You also need to develop a range of transferable skills, which you can build and improve while pursuing your education and other employment opportunities. Here are some of the key areas you should focus on to become a successful forensic video expert:
  1. Public speaking skills: You should be able to communicate your findings to supervisors or in a courtroom in a clear and concise manner.
  2. Note-taking and identifying key facts: You should have strong note-taking skills and be able to identify key facts that need to be included in your reports.
  3. Detailed observation skills: You should have strong attention to detail and be able to pay attention to details for extended periods.
  4. Writing concise scientific reports: You should be able to write clear, concise, and relevant scientific reports.
  5. Understanding and following scientific guidelines and processes: You should have a good understanding of scientific guidelines and be willing to follow them.
  6. Staying unbiased and composed in emotional circumstances: You should be able to remain composed in emotional circumstances and stay unbiased while performing your job.
  7. Personal integrity and a passion for finding the truth: You should have strong personal integrity and a passion for finding the truth.
  8. Critical-thinking and problem-solving skills: You should have strong critical-thinking and problem-solving skills to help you solve complex problems in your work.
Forensic video professionals’ work is intended to be used in court, so it’s crucial to be accurate, methodical, detailed, and, above all, unbiased. Moreover, the ability to write clear, concise, and accurate reports and maintain detailed notes are essential to any forensic video expert’s job. While not every case will require testimony from a forensic video professional, you should always maintain the quality of your reports should you ever be called to testify. Poorly written reports will often lead to questions regarding the quality of the work, increasing the odds of having to defend your work in the courtroom.

Networking / Social Media / Personal Behavior

It’s also important to note that networking and building professional relationships can extend beyond in-person interactions. 

Utilizing social media platforms like LinkedIn can be a valuable tool for connecting with professionals in the field, joining relevant groups, and staying up-to-date with industry news and trends.

However, it’s crucial to maintain a professional online presence and avoid controversial or offensive posts, as these can reflect poorly on you and potentially damage your reputation in the industry.

Overall, building a positive reputation through networking and maintaining a professional and ethical behavior online and offline can greatly benefit your career in forensic video analysis.

Employers

It’s also worth noting that forensic video professionals can also work for private investigative firms, law firms, and insurance companies, providing expert analysis and testimony in civil cases.

Some professionals may choose to work as freelance consultants, offering their services to a range of clients.

Overall, it’s important to consider the pros and cons of each potential employer and job opportunity, taking into account factors such as compensation, job security, and the nature of the work itself.

Networking, building relationships with potential employers, and staying up-to-date on industry trends and developments can also increase your chances of finding a rewarding and fulfilling career in forensic video analysis.

It's Time!

We hope this article has provided you with valuable insights into the world of Forensic Video Analysis.

It is a challenging and rewarding field that requires a combination of skills, education, and experience. By developing your skills in critical thinking, problem-solving, communication, and attention to detail, you can set yourself up for success in this field.

Remember to network, stay up-to-date on industry trends, and maintain a professional online presence.

You can achieve a fulfilling career in Forensic Video Analysis with dedication and hard work.

Succes Chalk Board
AI Tools

AI Tools Overview

by robAdmin

🚀 Exciting News: Forensic Notes Introduces Game-Changing AI Features! 🚀

We’re thrilled to announce that we’ve supercharged Forensic Notes with powerful AI capabilities, leveraging OpenAI technology to revolutionize the way you conduct investigations.

Here are some of the KEY features we’re introducing:

  • 🔍 ‘Strategic Investigation Planner’: Analyze your notes and receive customized suggestions for intelligent and effective next steps in your ongoing investigation.
  • 💼 ‘Prosecutor Review’ & 🛡️ ‘Defense Review’: Upload an arrest report for AI-assisted legal analysis from both perspectives, and engage in Q&A sessions to clarify potential issues and gain valuable insights.
  • ⚖️ ‘Case Law Summary with Q&A’: Upload a case law document for a detailed AI-driven analysis of the decision, followed by an interactive Q&A session for further insights.
  • 📚 ‘AI Legal Experts’: Get guidance on crime sections and essential elements that need to be proven, or seek advice on various legal matters through our AI-powered legal experts.

These are just a few highlights of the incredible AI-powered tools we’ve added to Forensic Notes. We can’t wait for you to try them out and experience the impact they’ll have on your investigation process.

Stay tuned for more updates, and as always, thank you for being a part of the Forensic Notes community.

Happy investigating! 

AI Tools Overview

Our cutting-edge AI Tools have been designed to streamline your investigative process and enhance your legal analysis. These AI-powered features are accessible through two main sections: AI Tools within Notebook and AI Tools Dashboard.


AI Tools within Notebook

These AI tools are seamlessly integrated within the Notebook interface, assisting you in crafting well-structured, professional notes, and providing guidance on ambiguous statements, spelling corrections, and additional questions. These tools also include the Strategic Investigation Planner and Investigative Feedback, offering valuable insights for your ongoing investigation.


AI Tools Dashboard

The AI Tools Dashboard offers a comprehensive suite of advanced features tailored for specific investigative and legal tasks. Some of these powerful tools include Legal Analysis of Arrest Reports from both Prosecutor and Defense perspectives, Case Law Summary with Q&A, Executive Summary of Criminal Reports, Document Translation, and Audio Transcription in multiple languages. Additionally, you can access expert AI-driven advice in Digital Forensics & Incident Response (DFIR) and Legal matters, covering multiple jurisdictions.

Explore each of these innovative tools to revolutionize your investigative and legal work, and harness the power of AI to achieve greater efficiency and accuracy.

Examples

Majority of the examples below are based off the following notes that an investigator may enter during an assault investigation.

Example - Assault Notes from Investigator

AI Tools within Notebook

  1. Create Summary & Detailed Report
  2. Strategic Investigation Planner
  3. Investigative Feedback
  4. Prosecutor Review
  5. Defense Review
AI - Notebook Menu

1. Create Summary & Detailed Report

Based on the notes in your notebook, this feature generates a concise summary and an in-depth narrative report, providing a well-structured and organized presentation of your investigation findings.

Summary:

AI Generated Synopsis

Narrative:

AI Generated Narrative

Note Options

  1. Analyze Note for Suggestions
  2. Voice to Note Converter
AI Note Options

1. Analyze Note for Suggestions

In the example below, the AI examines the note in progress and offers valuable recommendations for enhancing its quality before you save it.

AI Note Suggestions

2. Voice to Note Converter

The Voice to Note Converter seamlessly transcribes spoken words into professionally crafted written notes and translates most languages, including those with heavy accents, into English.

This ensures a professional and polished note every time.

German Translastion & Transcription to English

I interviewed witness Jason Jackson (DOB 01/18/1989) who observed the assault. Suspect was wearing dark jogging pants, white shoes, and a black shirt with skulls on the front. Suspect struck the victim in the back of the head and fled southbound. Suspect had dark hair. Jackson can be contacted at 778-555-3223 or JasonRocks@gmail.com.

Transforming Cluttered Voice Notes into Refined, Concise Notes

Our Voice-to-Note Converter intelligently eliminates filler words and transforms disorganized statements into clear, concise, and professional notes that are easy to read and comprehend.

As the video below demonstrates, you can review and edit the AI-generated note to ensure its accuracy and alignment with your original thoughts. Experience refining your voice notes seamlessly with our innovative AI-powered feature.

Umm… so like I spoke with ahhhh a witness who said, who said he saw the assault take place, but uh, ummmm. His name was Jason Jackson and ah born in 1989 and um..oh January 18th. Anways, he was like the guy assaulting was wearing dark jogging pants and bright white shoes. He ran southbound away after punching the dude in the back of the head. Like super hard. Ummm, he also said he had a shirt with... with skulls on the front, ah black in color. We can contact ummmm…. Jason at 778-555-3223 or email him at jasonrocks@gmail.com. Umm, oh yeah, he said he also had dark hair. Yah, that’s it.

AI Tools Dashboard

Key Features

  1. Generate Synopsis from Notes
  2. Generate Narrative from Notes
  3. Case Law Summary
  4. Legal Analysis (Prosecutor)
  5. Legal Analysis (Defense)
  6. Executive Summary – Criminal Report
  7. Translate Document to English
  8. Q&A
  9. Audio Transcription to English
  10. Audio Transcription – Use Audio Language
Ask an Expert
  • Digital Forensics & Incident Response
  • Australia Legal
  • Canada Legal
  • Philippines Legal
  • USA Legal
  • UK Legal

To activate the AI feature, simply upload a text file, and the AI will generate a response based on the content. Once the response has been generated, you’ll have the ability to engage in an interactive Q&A session, asking questions and gaining further insights regarding the results.

Dashboard Tools

Generate Synopsis from Notes:

Upload your investigation notes to generate a concise synopsis instantly. This AI-driven feature streamlines the documentation process, ensuring clarity and professionalism in your final written output.

AI Generated Synopsis

Generate Narrative from Notes:

Upload your investigation notes to generate a concise and comprehensive narrative report instantly. This AI-driven feature streamlines the documentation process, ensuring clarity and professionalism in your final written output.

AI Generated Narrative

Case Law Summary:

Upload case law documents to receive a comprehensive AI analysis of the decisions and engage in a Q&A session for further understanding.

R v Hamdan, 2017 BCSC 676 (Terrorism Case)

Legal Analysis (Prosecutor):

Upload an arrest report for AI-assisted legal analysis from a prosecutor’s perspective, identifying areas for improvement and engaging in a Q&A session for further clarification.

Prosecutor Review

Legal Analysis (Defense):

Upload an arrest report for AI-assisted legal analysis from a defense expert’s perspective, pinpointing areas that might be challenged in court and engaging in a Q&A session for a clearer understanding of the presented evidence.

Defense Review

Executive Summary – Criminal Report:

Upload a Criminal Report to generate an Executive Summary that offers a concise overview of key findings, clearly indicating if a suspect is identified or if the evidence is insufficient for a conclusive determination.

Executive Summary of Crime Report

Translate Document to English:

Upload a document to translate its content into English seamlessly.

Translation from Chinese

Question & Answers:

Upload a text file to enable an interactive Q&A session, providing insights based on the document’s content. 

This allows you to upload any text document and quickly extract information from it using natural language queries.

Audio Transcription to English:

Convert your audio files into professionally crafted written notes in English, ensuring a polished note every time.

Audio Transcription – Use Audio Language:

Convert your audio files into professionally crafted written notes in the original language, ensuring a polished note every time.

Ask an Expert

  • Digital Forensics & Incident Response
  • Australia Legal
  • Canada Legal
  • Philippines Legal
  • USA Legal
  • UK Legal
Legal Expert Q&A - USA
Professional Writing Skills are Important in Law Enforcement

Professional Writing Skills are Important in Law Enforcement

by Michael Post

Writing isn’t the first thing that comes to mind when we think about the skills needed for a career in law enforcement. Yet, police officers are expected to possess them, as they need to document their activities on a continuous basis.

In fact, some officers may have to write up to four lengthy reports per shift. That’s hours of work. Since those reports are used to enforce laws, the ability to write effectively and coherently is essential.

In this post, we’re going to talk about the connection between professional writing skills and a successful and fulfilling career in law enforcement.

Writing: Part of the Law Enforcement Routine

Television and media adaptation led us to believe that police work is all about chasing down criminals, high-speed vehicle pursuits, and dangerous shootouts.


The daily routine of a police officer – and other law enforcement officials – is quite different. Writing is a major part of that routine. A police officer needs to generate a report for every call of service to write down the details of events and investigations.


The reports are extremely important and used as evidence in court, investigating crimes, and even tracking criminal trends. A poorly written report thus can negatively affect a court case by failing to provide clear information about wrongdoing.

Ultimately, writing skills have a major impact on a law enforcement officer’s career. Police officers are well-aware of their importance.

In fact, a survey of Ohio police chiefs revealed that the vast majority perceived them important “to the success of a police officer” and that they “impact an organization’s ability to fulfill its mission.”

Credit: Police Chief Magazine

Over 90 percent of the participants also agreed that writing skills:

● Affected the prosecution of cases
● Impacted supervisor’s perception of them as a law enforcement officer
● Influenced the decision to appoint officers for special assignments
● Impacted their promotion within their department.

These results show that writing affects both an officer’s career and their ability to do their job.

When asked about specific qualities of writing (grammar, clarity, etc.), the participants also saw them as “extremely” or ”very” important.

Credit: Police Chief Magazine

So, the police officers say their writing must be accurate, clear, grammatically correct, detail-oriented, complete, and have a professional tone. Also, about 40 percent of participants saw “creativity” as a relevant quality to write effectively.

Types of Written Communications in Law Enforcement

So, what types of documents do law enforcement officers write? During the course of their career, they are expected to work on:

Reports

A police officer needs to draft a report describing every response to a suspected criminal activity. The report contains details such as the incident summary, involved individuals, facts, etc., and serves as a starting point in criminal investigations.


The types of reports vary and include traffic collision reports, arrest reports, DUI reports, crime case reports, stolen vehicle reports, attempted suicide reports, and lots more.

Community Outreach

Emails, website announcements, social media posts, and others – police departments are using outreach to engage with their community members. Police officers also participate in communication activities.

Internal Communications

As indicated by the Ohio survey, poor writing skills can negatively impact the perception of the supervisor.

Also, clear communication between police officers helps them do their job more effectively and efficiently.

Next, let’s see how to improve skills to communicate as a law enforcement officer.

How to Build Writing Skills for Law Enforcement Officers

1. Focus on Simplicity in Public Outreach Messaging

Making reports or other written communications sound fancy by using complex words and sentences is a bad idea. They introduce ambiguity and waste the time of people who will read the report later.

To make your writing simple, therefore, clearer, focus on two things:

● Conciseness
● Organization.

Let’s see some examples.

Read this excerpt from a public outreach program supported by the police department in Parker, CO. It’s a perfect representation of a concise, clear, and organized text.

To write clearly and organize texts:

● Use bullet points when listing tips or instructions. They make texts easier to scan and read
● Avoid informal language. Everyday, simple language is best for outreach because the public prefers it
● Start with a verb to give advice. Verbs eliminate repeating words in bullet points
● Use “you” and “your” in public outreach documents. It’s important to create a sense of a conversation with them
● Use headings and subheadings. They help to break up long texts, which applies to all kinds of public outreach writing.

Remember, the job of a law enforcement officer is to inform, not to impress.

Pro tip: Avoid “text speak” (e.g., “your” or “u” instead of “you are” and “you,” respectively) in all kinds of writing. Although it’s good for making writing shorter and more informal, it also makes it sound like an advertiser wrote it.

2. Use the “5-W 1-H” Formula for Report Writing

The “5-W & 1-H” formula is a common method used by law enforcement officers to achieve the most precise wording.
The abbreviation stands for Who, What, Where, When, Why, and How. By addressing these questions, an officer can address all details necessary for effective reporting:


● Persons
● Events/incidents
● Places
● Times
● Reasons.

Let’s see an example.

Version I – a poor example

“Victim states he was robbed at the Webster Square shopping center parking lot on 12th Street. The suspects fled down Washington Street toward Beaver Brook park.”


Version II – example written with “5-W & 1-H” formula

“Stephen Rowe stated that on 11/08/19 at approximately 8:45 pm, he was leaving Webster Square shopping center on 12th Street. Two males approached him in the parking lot with a gun and demanded to give them all the money he had. Stephen gave the men his wallet containing a credit card, after which the suspects fled toward beaver Brook park. Victim says the suspects were about 20-25 years of age, had a buzz cut, and wore black hoodies and blue jeans.”

The second version had much more details presented in an organized manner. This helps to organize the report and provide as many details as possible for investigation.

Pro tip: Andrew Rowe, a writing expert from TopEssayWriting: “Use between one and three commas per sentence. The second example follows this tip to avoid unnecessary complicated sentences and occasional punctuation errors.”

3. Use Chronological Order for Report Writing

Chronological order organizes events in a report according to the involvement of a law enforcement officer. This technique helps the reader understand the incident in order, as seen from the officer’s perspective.

Example without chronological order:

“I met with Ms. Morrison at 73 Shrewsbury Street regarding vehicle theft at about 3:10 pm. Ms. Morrison said she left her car parked by the piercing salon and went inside a nearby grocery store. When she returned to the parking lot beside the piercing salon, she found her car was missing.”

Example with chronological order:

“09/07/19 3:10 pm I arrived at the scene, located at 73 Shrewsbury Street. I interviewed the victim, Ms. Morrison, at 3:15 pm. Ms. Morrison stated that she left her car at the parking lot besides a piercing salon at about 2:30 pm. She said when she returned from the grocery store at about 2:45 pm, she found her car was missing.”

As you can see, each sentence contains a time to help the readers understand the timeline of the event.

Pro tip: begin every sentence with a noun (person, palace, or thing) as in the examples. It’s a normal structure in English that keeps sentences easy to understand.

4. Use an App to Organize Notes

Any law enforcement officer or civil investigator knows how important note taking is at the crime scene. This practice, however, is outdated and inefficient. The notes are usually taken on paper and then later need to be scanned and re-submitted to reports and other documents.

Using the forensic notes app is a more efficient practice. It has ready-made documents for reports where an officer can make notes and add media like photos, videos, geolocation, weather, contacts, and signatures.

A major advantage of using an app like Forensic Notes, is that it is  purpose built for law enforcement.

Unlike many apps that simply save your notes, it uses a combination of timestamping and hashing.

Basically it means you can easily verify that notes were taken contemporaneously and not altered after the fact – which can be very difficult using popular consumer notetaking apps.

And which may be essential when it comes to court admissibility. 

And plus, if you don’t like typing on your mobile device, there’s a voice recording feature, too, so you can do interviews and transcribe them later.

Related: Documenting Evidence – Top 12 Best Practice Guidelines

Professional Writing Skills in Law Enforcement: Final Thoughts

A law enforcement officer with strong writing skills can create quality reports and effectively communicate with colleagues and community members.

Writing will continue to play a vital role in law enforcement, so anyone working or planning to work in the area is advised to hone their writing skills.

AUTHOR BIO (Guest Post)

Nicole Garrison works as a writing consultant for TrustMyPaper and bestessayseducation.com

For the past ten years, she has been advising on writing planning content strategies for small businesses and non-profit organizations.

Nicole often hosts writing workshops and webinars to share their knowledge of writing for the web.

New Features: Contacts

New Features: Contacts

by Michael Post

We have a lot of new features and improvements coming to Forensic Notes in 2020. 

We have made our SIMPLE APP (ideal for mobile devices) much more user friendly and added built-in tools that make it more efficient to complete common note-taking tasks. 

Currently these new updates are only available when accessing Forensic Notes via your web browser.  We hope to update both our Android and iOS apps soon.

Today we show how we have simplified the process of adding a contact to your notes, such as a witness, victim, or suspect.

In particular you can now add a individual’s ID directly to your notes.

See how easy it is below:

New_Contacts_A1
New_Contacts_A2
New_Contacts_A3
New_Contacts_A4
New_Contacts_A5
New_Contacts_A6
New_Contacts_A7
New_Contacts_A8
<- Swipe to see previous | next step ->

Or Download the App

Forensic Evidence Transfer

Forensic Witness Guide

by Michael Post

FAQ Menu (tap to expand)

Forensic Witness is a unique forensic file transfer system for criminal and civil investigations! 

  • Built to allow investigators to collect video’s, pictures and other vital electronic files from a witnesses’ smartphone or computer.
  • Simple and quick for both investigators and witnesses alike.
  • Designed to collect evidence in a forensic manner suitable for court disclosure.
Forensic Evidence Transfer
Play Video

Try the live demo & see how easy it is!

How It Works

Forensic Witness works by:

  • Sending an SMS or Email (one-use-only) to your witness’s device.
  • Witness clicks on a link contained in the SMS or Email.
  • The file upload page is displayed to the Witness.
  • Witness selects files they are willing to share and upload.
  • Files are uploaded and forensically analyzed.
  • Two (2) PDF documents are generated, Digitally Signed and Timestamped. This documents the uploaded files for exhibit continuity and disclosure purposes. 

Why Trust Forensic Notes?

Have questions about our security or storing sensitive information online?
Read our comprehensive FAQ on why you can Trust Forensic Notes.

(IMPORTANT) The witness does NOT need to install any applications on their device or give up possession of their device to the investigator. This is essential for obtaining evidence from reluctant witnesses who are often the ones with the most vital evidence.

Witnesses are concerned about their privacy. Forensic Witness is the only solution that allows witnesses to remain in control of the information they are willing to share.

Let’s see how easy it is for the investigator and witness to use FORENSIC WITNESS:

INVESTIGATOR:

For investigators, open your Forensic Notes app and follow these 5 simple steps!

Investigator-Step_1a
Investigator-Step_2a
FW_Investigator-Step_3
FW_Investigator-Step_4
FW_Investigator-Step_5
<- Swipe to see previous | next step ->

WITNESS:

As a witness, you will either receive an SMS or Email link from the investigator.
Once received, simply follow these 5 quick steps! 

FW_Witness-Step_1
FW_Witness-Step_2
FW_Witness-Step_3
FW_Witness-Step_4
FW_Witness-Step_5
FW_Witness-Step_6
<- Swipe to see previous | next step ->

Want to see how easy Forensic Witness is for yourself (or your agency).  Visit our live web demo today.

To learn more about Forensic Witness and to see how our solution compares to existing methods for obtain evidence from witness smartphones visit our Forensic Witness main page..

Book Cover

Investigating Windows Systems Book Review

by Michael Post

Although I currently work in Digital Forensics and don’t specifically do Incident Response, I have a strong interest in the subject after realizing how cybercrime was beginning to play a role in the majority of financial crimes.

As a result, I have read a lot on the subject and try to keep up-to-date on the latest in cybersecurity.

I have been following Harlan’s work for many years reading his blog and his comments across the different social channels like Twitter, forums and LinkedIn.

So, when he said he was coming out with a new book, I was excited as I knew he was someone with meaningful insights, always backed up with facts and detailed explanations on why he believes the things he believes.

Prior to reading Harlan’s book, I had the opportunity to take the SANS 508 Advanced Incident Response course.

This was a fantastic course taught by Rob Lee.

It was a real eye-opener into the world of Incident Response and Cyber Security.

In fact, it was the driving force behind a lot of my knowledge into current trends, Advanced Persistent Threats (APTs) and theories on how to respond.

If you ever have a chance to take SANS training, I highly recommend it.

Although the training was great, I did not personally feel like I would be able to go and actually take part in Incident Response situations hands-on, but I was certainly more confident that I could assist in an advisory role.

This is no fault of the course, but rather my lack of initial knowledge and training in Incident Response prior to taking the course.

I just didn’t feel like I knew how or why certain decisions were made during the analysis phase to ensure it was done quickly and efficiently.

And since Incident Response is all about getting the bad guys out of the systems while reducing the downtime to the organization, this was knowledge I knew I needed.

The Review

This brings me to the book review of Investigating Windows Systems.

As I stated prior, Harlan is a man who speaks what he thinks and backs it up with experience, knowledge, and facts. This is something that I appreciate.

Anyone can complain and point out that things are not being done properly or analyzed in the right way, but few can provide clear ideas and opinions on how it should be done.

Prior to ordering the book, I had read online some grumblings that some people were not happy with the overall size and cost of the book. Unfortunately, you can’t make everyone happy.

In a world where many want things bigger, faster and cheaper, we forget that quality counts. Not to mention that training in DFIR is expensive.

 

Book Cover

Quality training, likes SANS, easily costs over $1000 USD per day, so a book for approx. $60 that offers so much is a great deal.The reality is that the book is smaller than your typical book in the computer industry, but I think that is a positive.

I have read too many monstrous books that claim to provide all the answers but are limited on practical details and instead list example after example that may or may not provide insight into real-world issues.

Harlan went the opposite direction and wrote a book which provides just the facts and just the information you need to feel more confident in responding to a cyber incident.  A style that has likely served him well in producing reports on the numerous incidents he has investigated.

The book is broken down into 5 parts.

  1. Analysis Process
  2. Finding Malware
  3. User Activity
  4. Web Server Compromise
  5. Setting Up a Test Environment

In the Preface, Harlan starts off by stating “I am not an expert”, but with over 30 years in the information security field, I think it’s safe to say Harlan is being a bit humble.

The reality is that he IS an expert and clearly knows what he is talking about when it comes to incident response.

He continues by stating: 

“…all of my earlier books have included…but little in the way of the thought process and analysis decisions that go into the actual analysis…there are a number of sites you can visit online that describe the use of open source and freely available tools for parsing data sources. However, rather than listing the tools and providing suggestions regarding how those tools might be used, I thought it would be a good idea to provide example analyses, from start to finish, and include the thought processes and analysis decisions along the way with respect to what tool to use, why, and what the analysis of the output of the tool provided, or led to.“

This is where I think Harlan’s book really shines and why I feel so strongly that others should be looking to purchase and read this book.

For someone like me, that feels overwhelmed at the idea of responding to a cyber incident, getting into the mind of an expert who has dealt with countless cyber incidents is extremely valuable.

I have read a lot of technical books that leave me wondering why certain steps were taken only to later determine that the steps were possibly inaccurate or at the least not well thought out, sometimes wasting me hours in attempting to replicate these ill-conceived steps.

Harlan’s book is the opposite.

Each decision is explained and evidence is shown on what step to take next and why to reduce the overall amount of data that you need to process and analyze. His examples flow, allowing you to ‘see’ what Harlan sees as he steps you through the different examples.

With the vast amounts of data and information now available in every cyber incident, Incident Response members have to have a clear plan and take steps to reduce the workload and get the system up and running quickly.

Harlan also stresses the need for proper documentation during every phase of your incident response and to properly interpret the data being analyzed, stating…“The purpose of digital forensic analysis, and hence, an analyst’s job, is to paint a narrative that informs those who need to make critical business (or legal) decisions.

This means that you cannot put a bunch of facts or data points ‘on paper’ and expect whoever is reading it (your client) to connect the dots.

The analyst’s job is to build an outline and start filling in the picture, addressing the client’s questions and analysis goals. You do this by collecting the available and appropriate data, and then extracting and interpreting those elements or data points that are pertinent to answering the analysis goals or questions.

The keys to this, although not the sum total, are to extract all of the relevant data points, and to interpret them correctly…not interpreting the data correctly will lead to incorrect findings, which in turn will incorrectly inform decision makers”.

An incorrect finding could result in millions in extra costs to the client if the IR team incorrectly determines that a breach occurred months prior to when it actually did occur or was more invasive than what actually occurred.

In my mind, Harlan’s book is a must for folks working in Incident Response.

I strongly encourage you to purchase the book so that you can get into Harlan’s head and see why he makes the decisions he makes during an incident response.

I started off this review stating that his book is excellent and that we must support Harlan and others like him that give so much to the DFIR community.

Training within the DFIR field is expensive and if we hope to have Harlan and others produce books like this, which provide so much useful information at a fraction of formal training costs, then we have to support them by purchasing the book and encouraging others to do the same.

Purchase at:

  • https://www.amazon.com/Investigating-Windows-Systems-Harlan-Carvey/dp/0128114150
  • https://www.elsevier.com/books/investigating-windows-systems/carvey/978-0-12-811415-5

Write Your Own Review

To encourage others in supporting leaders in the field like Harlan, I will give a 6-month Professional membership to Forensic Notes to anyone that writes a detailed review of this book. 

Simply email me directly with a link to your review.

Happy Reading,

Robert Merriott (Founder of  Forensic Notes)

About the Reviewer

For any review to be relevant, I think it is important to know the background of the reviewer so that you understand their perspective and if it relates to your background and knowledge.

My Background:

Computer Information Systems

  • Worked as a backend developer for several years specializing in web technologies
  • Changed careers and went into policing
  • After 7+ years in policing (patrol/tactical), went into Digital Forensics
  • 5+ years in Digital Forensics & Cybercrime
  • 1000+ hours of training in DFIR – Lots of courses & certifications
  • Started my own software business within the Digital Forensics industry called Forensic Notes
  • Continuing to expand my knowledge in DFIR
Immigration, Credibility & Contemporaneous Notes

Immigration, Credibility & Contemporaneous Notes

by Michael Post

Recent case-law highlights how contemporaneous notes aid in showing credibility

WEI, ZHIMING v THE MINISTER OF CITIZENSHIP AND IMMIGRATION
Case: Wei v. Canada (Citizenship and Immigration), 2019 FC 982
Court: Ottawa, Ontario, Canada
Date of Hearing: 2019-04-01
Date of Judgment: 2019-07-24

Summary

Zhiming Wei (“WEI”) was denied permanent residence in Canada based on evidence, in part the contemporaneous notes, of an Immigration Officer (“Officer”) from Immigration, Refugees and Citizenship Canada (IRCC).

WEI applied as a member of the Self-Employed Person class, stating that he had a net worth of approximately $20 Million dollars. WEI noted that he was an experienced television producer, publisher, and director in China and planned to establish a company in Vancouver based on this experience.

WEI was denied permanent residence.

Immigration

The “Officer found that the Applicant did not have a concrete business plan regarding his self-employment in his intended destination of Vancouver to meet the definition of a Self-Employed person.”

Also, the Officer was not satisfied that WEI “had relevant experience or that he had the ability and intent to make a significant contribution to specified economic activities in Canada”.

Being able to contribute significantly to economic activities in Canada is required by the Immigration and Refugee Protection Regulations (IRPR) to be granted permanent residence under the Self-Employed Person class.

Instead, the Officer “noted that it appeared that the Applicant would rely on assistance from friends and liaison companies to conduct his self-employment in Vancouver.”

WEI challenged this decision in court. However, Justice Annis dismissed the application.

Of significance was the justice’s consideration of the Officer’s notes in the decision.

Key Insights:

Here are some key insights on why you should be keeping contemporaneous notes.

Courts rely on Contemporaneous Notes

When a dispute arises between parties, contemporaneous notes detailing what happened will be relied on.

It is also important to remember that in many occupations, contemporaneous notes are expected and required.

These notes are often required since disputes can often end in court, and the court expects to be able to rely on the notes taken during or shortly after an event.

If challenged in court, one of the highest compliments you would want to hear would be the words of Judge Peter Annis in this ruling:

“[28] I completely reject any suggestion that the Officer did not appropriately discharge her duties in an independent and unbiased fashion interviewing the Applicant, or fail to take down accurate contemporaneous notes of the meeting upon which the Court may rely with confidence.”

Testifying in Courtroom

Detailed Contemporaneous Notes are vital to be seen as Credible

As mentioned numerous times in this ruling, the Officer in question took very detailed contemporaneous notes.

It is essential to realize there are two key elements in good notetaking.

There are being:

  1. Detailed
  2. Contemporaneous

Having detailed notes, in this case, was vital in supporting the conclusion of the immigration officer.

As written in this decision:

“[23] Generally, it is a very rare case where a highly self-interested applicant will be able to convince the court that a trained visa officer falsified records in his or her contemporaneous notes without very clear evidence to support the allegation. The court must defer to an employee who has developed an expertise in assessing these types of economic claims in terms of determining that there is insufficient persuasive evidence to conclude that there is a likelihood that the applicant will follow up on his business plans after obtaining permanent residency. To do otherwise would involve the court reweighing the evidence.”

The above excerpt clearly shows the value courts place on the testimony and evidence of the Officer. It also shows how the credibility of the Officer is essential to a smooth and efficient court system when dealing with immigration matters.

In this case, the Officer followed her training and produced detailed Contemporaneous Notes clearly outlining the reasons why WEI should not be granted permanent residence.

A key element to proving that notes are contemporaneous is proving when they were written.

However, PROVING when a note was written is not possible unless:

  1. An independent person witnesses the written notes, or
  2. It is saved in a system designed to timestamp the creation of the note.

This is why MS Word and OneNote should never be used to write Contemporaneous Notes.

Woman Keeping Digital Notes
Play Video

Failing to provide contemporaneous notes hurts your case.

Both sides should have their own documented evidence.

Professionals and government employees are expected to keep proper documentation; those who find themselves in court should have documentation to help bring credibility to their claims.

In this case, WEI failed to provide documentation on the work he completed in Canada to support his application for Permanent Residence. Then in the courtroom, he only offered an affidavit of his recollections of the discussion with the Officer, which were not detailed.

In the decision, it was noted that:

[26] As well, the length and detail of the Officer’s notes, most of which related to the Applicant’s failure to provide responses to questions, none of which has been provided in the aftermath, suggests that the notes properly represent the contents of the interview, such as to question the Applicant’s credibility, not that of the Officer.

Unfortunately, keeping detailed contemporaneous notes is not something most people think of doing until it is too late.

With Forensic Notes mobile (for iOS, Android, and web browsers), you can easily keep detailed contemporaneous notes while on the go.

Add documents, emails, photos, videos, or dictate or record audio notes at the time or shortly after any 

critical life event.

Detailed Contemporaneous Notes = Credibility

Forensic Notes is easy to use and ensures you can PROVE your detailed notes are contemporaneous.

Learn more at www.ForensicNotes.com

Convinced Contemporaneous Notes Matter?
Now Read Our Best Practice Guide on Documentation.

Fake Notes

Fake Notes?

by Michael Post
Fake Notes
Play Video

“Watch out for people that take so-called “notes,” when the notes NEVER EXISTED until needed”

To avoid possible false allegations, contemporaneous notes should always be timestamped in a trusted note-taking system so that the writer can PROVE when they were written.

This eliminates the allegation of ‘fake’ notes that were created “when needed”.

The US President, Donald J. Trump recently tweeted…

Trump's Tweet on Fake Notes

The key statement within this tweet is his claim that the “notes never existed until needed”.

Can we determine when these “notes” were created?

You may be surprised to learn that using popular word processing applications may leave this question unanswered.

However, it would be very easy, if they were created in an immutable system like Forensic Notes!

President Trump makes a valid and interesting point about contemporaneous notes and those that claim to have written them. Being able to independently verify when they wrote the note is a key component to their credibility.

Taking good notes matters.

PROVING when you took good notes matters even more.

This is why Forensic Notes was created.

Forensic Notes allows you to create notes while ensuring you can always PROVE when you wrote them.

From a technical perspective, every note is Digitally Signed and Timestamped, using the same technology used by major banks and government agencies.

Simply put…

After you write a note, it is made immutable (can’t change) and it includes the date/time of when it was written.

This is similar to the idea of placing the note on the blockchain, which is often in the news.

And like the blockchain, anyone with a copy of your notes could simply drag & drop your notes on our verification page to confirm the notes were the originals and unaltered.

As more information comes out on how these notes were written, we will see if the authors are able to PROVE when they were written. Perhaps they used Forensic Notes?

Interested in protecting your credibility?

Signup with Forensic Notes Today!

Is the Cloud Safe?

Is the Cloud Safe?

by robAdmin

I recently received this question from a potential client who was looking to signup with Forensic Notes… (and eventually did).

“Is the cloud safe?”

Actually, he was a bit more direct stating “I will never put my data in the cloud”.

But I understood this strong statement to really be a question about cloud safety and if his businesses’ data would be safe in the cloud.

There are a lot of misconceptions around the cloud and how data is stored.

The problem with the term ‘cloud storage’ is that people believe that once data is uploaded to the cloud, it is available for everyone to see and share, but this couldn’t be further from the truth.

Others believe that if data is in the cloud, it is stored everywhere and therefore has a higher chance of being stolen.

As I will explain, both of these beliefs are incorrect. But given the marketing literature around the cloud, it is understandable for those of you that think this way.

Hopefully, I will be able to explain what the cloud is, why it can be the most secure place to store data and why many IT departments are against the idea of storing data in the cloud.

I will also explain situations where the cloud may not be suitable. Sometimes an On-Premises solution is your best option.

So, let’s get started.

Concerns with Cloud Storage

 

What are your concerns regarding cloud storage?

This was one of the first questions I asked since I wanted to fully understand the fears this client had and what was forming his opinions of the cloud.

His response was pretty simple…

“I just don’t trust the cloud and I want my data stored in my network.”

I thought this was a fair answer, but also showed he didn’t really understand that the cloud is simply a server hosted at a physical location and that for many businesses, it is a lot safer than your local computer network.

The reality is that if your organization is on the internet, then your data is already potentially accessible from the internet. For many organizations, it just takes an improperly setup firewall to give outsiders access to all your files.

So…

What is Cloud Storage?

 

 

Cloud storage, in simple terms, is a server that is hosted in a physical location and accessible via the internet.

The main cloud providers are Amazon Web Services (AWS), Microsoft Azure, IBM Cloud and Google Cloud.

But why is Amazon, Microsoft, IBM and Google investing their future in providing cloud services?

Because this is going to be a huge revenue stream for all four companies in the future.

By the end of 2018, Microsoft is expected to generate over $7 Billion in the quarter from its cloud service division. This is for a single quarter with revenue growing consistently quarter over quarter. For Microsoft, this equates to roughly 20-25% of their overall revenue.

By the end of 2019, this could be a $30+ Billion per year service for Microsoft.

As a result, Microsoft invests over $1 Billion in its Cybersecurity to secure the MS Azure network which Forensic Notes utilizes.

Why do they invest so much money in Cybersecurity?

Because they know that if client information is ever stolen as a result of their mistake, this would cause trust to quickly diminish and therefore lower future revenues.

Not only does Microsoft spend $1+ Billion a year on cybersecurity for MS Azure, but they also design the software that the majority of businesses use. As a result, they literally have access to the operating systems source code which your application runs on in the cloud. Not only this, but they have direct access to the engineers of the software should an issue arise.

As more corporations and governments move toward the cloud, the revenue generated from cloud services will make up a larger percentage of the overall revenue for Microsoft, Amazon and other cloud storage providers.

Compare this with the expertise in your IT Department and the amount your company will be spending on cybersecurity and hardware upgrades this year.

I’m not suggesting that you don’t have an amazing IT Department, but let’s be honest for a minute.

If your network engineers were the best in the industry, then don’t you think they would be working for one of the major IT companies?

The internet has allowed us to have access to experts in every field through online chats, videos and articles. The cloud gives us access to IT experts to help manage our networks and applications giving you better security than you can have on your own.

Don’t Agree?

Then I assume you are either personally running the servers and network or working for a truly amazing company with a top-notch IT Department.

If this is the case, then an On-Premises solution may be your best option. But as we will discuss below, security of your data is one reason to move to the cloud, the other is the availability of software.

More and more software companies are moving their applications to the cloud with less developed for On-Premises use.

If you are considering a cloud application, then you next question should be…

“Is the cloud application secure?”

 

Cloud Application Security

 

 

The security of the cloud application you are considering must be analyzed to ensure that your data will be secure within the cloud.

Not all applications are created equal and just because you trust Microsoft or Amazon to store your data and application, this does not mean that the actual application is secure.

One of the main things to consider is if the SaaS vendor is open about their security.

  • Is the data encrypted?
  • What additional security steps do they take to secure your data?
  • Who runs the company? Can they be trusted?

Un-encrypted or improperly encrypted data either stored in the cloud or within your network could result in civil lawsuits if that data is ever exposed. You want to be sure steps have been taken to properly encrypt and secure the data.

If the SaaS Vendor is not open about how they secure your data and unwilling to answer security related questions, then I would avoid such as service. Remember, if they provide ‘marketing terms’ to discuss their security, then you are not getting the answers you need.

Don’t accept “We use military grade encryption” if they are unwilling to provide further details on what that means.

In comparison, we are fully open about how we secure your data at Forensic Notes as detailed on our Security & Data Encryption page. We are also open to any emails asking for additional information on how we secure our clients information.

If you have concerns about the security of the SaaS application you are considering, then I would look for a different service.

Security of your data should be your number one priority when looking at potential software applications and vendors.

Software Applications: Does an On-Premises Option Exist?

 

 

“I still don’t want to put my data in the cloud!”

If you still don’t want to put your data in the cloud or haven’t found a SaaS vendor that you trust, then you have to determine if the software you want to use is available for On-Premises installation.

In the past, this was common and the only way to purchase software. However, over the past few years, the majority of software vendors have moved their applications towards cloud services (SaaS = Software as a Service).

As a result, it may be difficult to find software for your organization that is:

  • Current
  • Secure
  • Priced appropriately

 

Current

One of the first questions when looking at On-Premises software is to determine if the application is current. If the application has been recently developed or updated, then you must determine if the software vendor will continue to update the software in the future to fix bugs and provide feature enhancements.

If this is a considerable investment for your organization, then I would also look to see if you can sign agreements to put the source code of the application in escrow should the company close or fail to provide future updates.

A software escrow is something that we would agree to as discussed here for our larger clients.

If you can’t find any On-Premises software that meets your needs and is currently updated, then this may force you back into a cloud application (SaaS).

Deciding to go with an older application that won’t be updated will likely have major security issues and bugs which could cause major issues to your organization.

Let’s be honest, if the software was any good, they would be continuing to update it.

Don’t trust your data to an outdated system that is no longer updated.

 

Secure

The next item to consider when looking at On-Premises is security.

  • How is the data encrypted?
  • How will it be secured within your environment?
  • Will the system be air-gapped on its own network or accessible from all computers, which likely has internet access?

Once again, you will want to check out the software vendors site to see what type of security they use to secure your data within their application or contact them personally to ask questions.

I hate to say this, but top cybersecurity experts agree, it is not “IF”, but “WHEN” you get breached as an organization.

And breaches don’t always come from the outside, many breaches occur internally. If an employee had access to your servers, could they download all the data stored in the application un-encrypted?

This is why data encryption is so important.

A properly developed and secured application will make it very difficult to obtain all the data and encryption keys required to decrypt the data.

 

Priced Appropriately

You found On-Premises software that is current and secure, but is it affordable?

A lot of current On-Premises software is developed for larger organizations and enterprises. If you are a small or medium sized business, the cost to purchase, setup and implement may be beyond your current budget. This is what makes SaaS software so attractive as the monthly costs are usually low compared to purchasing On-Premises.

The reality is that many software vendors don’t want to bother with smaller companies and therefore set their prices to only attract large organizations.

At Forensic Notes, we are committed to the smaller organizations for our On-Premises software as many of our clients are government agencies with limited budgets.

Before committing to an On-Premises application, make sure you find out the final cost to ensure it fits within your budget.

IT Department is Against using the Cloud

 

This is common among IT departments, especially if the employees are well established and have been within the organizations for a while.

Why is this the case?

Well, as stated above, you may work for an amazing organization that employs some of the best IT members. Your organization may also have specific needs that require On-Premises solutions.

However,…

Others may have an IT department that doesn’t like change or want to give up work as they believe it could lead to less job opportunities in the future.

In theory, the cloud allows organizations to outsource their IT services, but in reality, it simply requires that IT personnel retrain to understand the cloud and how they can work with the cloud provider to provide the most secure network they can for the organization.

Most people fear change. Your IT department is no different.

Cloud Security: Making Your Cloud Application More Secure

 

There are additional ways to make your cloud applications more secure depending on the options provided by the SaaS provider.

As mentioned previously, by deciding to host your data or application in the cloud, you are simply storing the data on a physical server hosted at a physical location. This is very similar to your organization connecting with another office location or allowing remote access to your systems, except…

The connection is not going through a private Virtual Private Network (VPN).

Cloud applications by default are accessible to anyone with the correct URL and login credentials. If the application thinks about security, it will also incorporate additional security systems like Multifactor Authentication (MFA) or hardware tokens to ensure only authorized users gain access to your application.

To make this setup more secure, you can incorporate a VPN from your office location to the cloud servers. This essentially takes your application off the internet and only makes it available to users accessing the application from your office location.

This is how networking works for organizations with multiple locations.

Depending on the setup, this will likely result in additional costs associated with the application both for setup and ongoing maintenance.

Conclusion

 

Is the cloud safe?

Yes, and I hope I showed you why. But you still need to do your research and determine if the SaaS vendor you are choosing has developed an application with security in mind.

In our case, the client who stated “I will never put my data in the cloud” happily signed up with Forensic Notes to utilize our SaaS cloud application for his organization after I was able to show him that his data would be secure.

For some organizations, On-Premises may make sense. Not only for the reasons outlined above, but it also depends on the type of data being stored.

Police departments deal with sensitive information and as a result normally work on secure air-gapped networks that don’t have access to the internet. This is where our On-Premises  and Hybrid solution come in handy.

As always, if you have any questions about Forensic Notes and how we secure our clients data, please don’t hesitate to contact me directly at Robert@forensicnotes.com

If you found this article useful, please share via Social Media.

And if you think it could be improved in any way, please let me know.

 

Cheers,

 

Robert Merriott

Founder
Forensic Notes

Paper Notebook & Pen – Ultimate Guide to Taking Notes

Paper Notebook & Pen – Ultimate Guide to Taking Notes

by robAdmin

A Paper Notebook & Pen has been the standard way to take notes for decades as it is trusted in both criminal and civil courts. Although most investigators are choosing to go with an Electronic Notebook like Forensic Notes, many individuals continue to love the feel of a good pen when taking notes.

If you plan to make handwritten notes, then here are a few tips to ensure your notes are accepted within civil and criminal courts.*

Notebook

  • Bound paper notebook
    No ability to add/remove pages
  • Numbered pages
    Printed on every page
  • Lined

When writing in the notebook, you should utilize a high-quality pen following the ELBOWS model:

E – No Erasures

L – No Leaves torn out

B – No Blank spaces

O – No Overwriting

W – No Writing in margins

S – Statements to be written in direct speech

For general details on how to write your notes, refer to our Top 12 Best Practice Guidelines for Recording & Documenting Evidence.

Top 12 : Best Practice Guidelines for Recording and Documenting Evidence : Infographic by Forensic NotesTop 12 : Best Practice Guidelines for Recording and Documenting Evidence : Infographic by Forensic NotesTop 12 : Best Practice Guidelines for Recording and Documenting Evidence : Infographic by Forensic Notes

Detailed Guideline for Criminal Investigators

 

The UK Government provides a very detailed guideline for criminal investigators in Immigration Enforcement (IE). The guideline covers how to obtain, use and store an official notebook used during investigations and is useful for anyone looking to properly use paper notebooks.

As stated within the document:

Contemporaneous notes means notes written either:

  • at the time
  • as soon as possible after the event

If you do not complete a notebook entry as soon as possible:

  • it may not be regarded as contemporaneous
  • you may not be permitted to refresh your memory from it at court

Version 8.0 – Published October 11th 2017

[ Click here to download ]

Guideline Contents Overview

Contents – 2

About this guidance – 3

Contacts – 3

Publication – 3

Changes from last version of this guidance – 3

The purpose of a notebook – 4

Issuing notebooks – 5

What criminal investigators do if the usual issuing officer is not available – 5

Using notebooks – 6

Keeping contemporaneous notes – 6

The contents of a notebook – 8

Basic entry information – 8

Recording time of entry – 8

Effective use of the index – 8

When to use a separate page – 9

Blank spaces and deletions – 9

Comments or replies made by suspects – 9

Recording diagrams – 10

Taking notes if unable to use official notebooks – 11

When you may not be able to use an official notebook – 11

How you record these notes – 11

Evidence or observations taken on a Dictaphone – 11

Recording notes from SMS text messages – 12

Recording sensitive information – 13

Checking notebooks – 14

Why notebook checks must be done – 14

Keeping and storing completed notebooks – 15

Taking notebooks out of use – the officer – 15

The issuing officer – 15

Lost or stolen notebooks – 16

What the officer must do – 16

What the issuing officer must do – 16

How notebooks can be used in evidence – 17

Blue Line Magazine

 

Blue Line Police Magazine - Police Note-Taking

www.BlueLine.ca

“Sloppy police note taking is bad for the incourt credibility of a police witness. It undermines
the successful prosecution of a case.”

~Former Crown Prosecutor Bradford Smith

August / September 2015

[ Click here to download ]

* Always check with your local courts to ensure the advice and information you find online meets the needs of the legal system in your area. The information provided in this article is not meant to be legal advice.

DFIR Client Interviews

DFIR Client Interviews

by robAdmin

Below are recent interviews with clients that work in Digital Forensics and Incident Response (DFIR).

August 2018 – Digital Forensics Examiner – USA Private Industry

 

I recently had the opportunity to talk with “Tom” about his experiences in using Forensic Notes. Tom has been a client for over a year and had the following to say…

 I haven’t been using it as much as I’d like.  The “online” part of it makes it limiting in some cases.  For example, I can’t use it on my forensic laptop at work because I don’t keep that connected to the Internet. But I’m sure I’m not the first person to say that.

I do use it for some personal things that I do so I can keep track of my notes.

The requirement to be ‘online’ is a common issue for those that work in an environment where the internet is restricted or not available. As a result, we have been working hard to develop our 2nd generation On-Premises software solution to solve this issue.

On-Premises does not require an active internet connection.

On-Premises & Hybrid Solutions

Click here to find out more about our On-Premises & Hybrid solutions.

However, for most of our users, they find the ability to move locations and keep their notes available to be the ideal solution.

 … my frustration is really finding a good note taking application that I can use cross-platform, and has some security behind it [like Forensic Notes].

I’ve used [other note taking application] in the past, and I’ve liked it, but it’s too unstable.  I was using it recently at work and the program crashed and lost all of the notes I had put in up until that point.

I’ve been using OneNote at work, but it’s just terrible at that sort of thing.  I know others have used Word, Notepad, etc but I still have concerns about those products. 

Since Forensic Notes can be run in any web browser, it is Cross-Platform available on Windows, Macintosh, Unix and Mobile devices.

MS Word & OneNote

Click here to view our detailed article on why you should never use MS Word or OneNote for creating contemporaneous notes during your investigation.

 I like the way Forensic Notes is laid out, but again the only reason why I can’t use it more is because it has to have the Internet connection. 

iOS & Android App – Offline Use

Our iOS & Android app allows user to take notes when no internet connection is available. Once an internet connection is available, all notes can be synced to the central server.

July 2018 – Digital Forensics Examiner – Canadian Police Officer

 

I asked the following questions:

1) Would you be able to advise what you like and don’t like about Forensic Notes?

2) What features do you use most often?

  • Do you embed images within your notes?
  • Take pictures/video during warrants?
  • Add attachments (warrants, files)?

The Responses Follow:

Would you be able to advise what you like and don’t like about Forensic Notes?

There are two features that I really enjoy:

  1. The ability to access it from anywhere; multiple offices, computers and iPad.
    Knowing that I can start a case at the office for a search warrant and then access the notes on scene with my iPad.
  2. The other feature that I quite enjoy now is that you can now create a folder.
    This I love! as I have a basic template for each case now;

    1st folder – Case Assignment/Coms with PI (Request, search warrants, any emails, etc. …)
    2nd folder – Exhibits
    3rd folder – Examination
    4th folder – Disclosed material

Templates

Templates are a powerful feature of Forensic Notes allowing you to create and re-use portions of notes.

Click here to see a video of this feature

What features do you use most often?

As above:

  • The folder option and attaching images (search warrants and usually the first overall image of an exhibit).

I haven’t used the sticky note or the note function yet as I was actually worried they would become a permanent record.

Sticky Notes (soon to be Bookmark)

The Sticky Note will NOT be included in any Forensic Notebooks downloaded. The idea of the Sticky Note is to replicate Post-it Notes used with physical paper notebooks. Post-it Notes are often used to quickly find a note or add a reminder to complete a task.

They should not include case-specific information and are therefore not included in the Forensic Notebook downloads.

 

Do you embed images within your notes?

Yes, I do.

Usually the search warrant and I have now started attaching the first overall image of an exhibit to its note page in the Exhibit Folder.

 

Take pictures/video during warrants?

I only take pictures of the actual exhibits I touch/image. The overalls are done by the IDENT folks.

 

Add attachments (warrants, files)?

Only exhibit pictures, warrants, and the text page the members complete requesting our service and what it is they would like us to find.

Since we only have [reporting system] and we don’t have an actual case management tool/software in our office I have been trying to lay my notes out like a poor man’s case management tool and record keeping.

 

Do you have any suggestions for improving Forensic Notes?

I would suggest maybe a template/note for showing chain of custody maybe? … I find that the features and the functionality you have rolled out really good and super easy to use.

Chain of Custody Template

Using the Template feature, you could easily add a chain of custody form and either fill it out electronically (with typed text) or use stylus to handwrite values onto an image of a form.

With Forensic Notes Versioning, you can then keep editing the same form, but also timestamp each change and have a clear chain of custody record with each edited version.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More