Cornerstones of a good digital forensics’ lab

Written by Blogger

August 11, 2022

Guest Blogger

Hilary Rodela, Lead Digital Content Writer for Taction USA


Collecting and extracting evidence is half the battle when it comes to seizing evidence and processing a crime scene. When you don’t have the right supplies or resources it can impede your investigation or even ruin the chain of custody.

I have seen much while being a crime scene investigator and one of the most devastating things is when pulling out a piece of evidence on a shelf and the bag is ripped, or even worse has damage. This alone can ruin your investigation and the integrity of your evidence.

When your evidence is contaminated, your case suffers. Even in the world of digital evidence, there are potential contaminators out there that can change your evidence forever. Paying attention to your procedures and how the evidence is collected and maintained can make all the difference with any type of evidence.

Always have a set procedure checklist that will ensure that you will receive the best possible evidence. First responder cards like those made at Paraben allow for a simple procedure that will ensure the best preservation of some popular mobile evidence.


There are a lot of roadblocks that can change what you can and cannot get from your evidence. One of the most common issues that are rarely addressed is the lack of resources. In many places, forensic labs are backlogged. Much of that problem is because of a lack of employees. In many places having a computer forensic analyst in-house or nearby is rare. In addition to employee shortages, there is always an issue of budget. When it comes to processing digital items, the costs are high, and the skills are unique. Many times, people are intimated by this type of analysis. However, when trained properly, it can become second nature, just like other aspects of forensic investigation can. Even with basic level skills, data can be processed properly, and information found can be critical evidence.

When working with anything digital evidence-based it is all about the tools. There are multiple tiers to the types of digital evidence that will be collected, processed, analyzed, and then stored. There are steps that are done have different unique tools at each stage. This is where many organizations will hit barriers that will stop them from being able to process digital evidence in-house.

There are multiple programs available that allow for grants to be used to outfit your organization with the proper tools. In addition, there are training programs that include equipment that will allow you a bonus of getting things all in one place.

When storing your electronic evidence, it is all about having the proper procedure as well as media in place that will ensure the integrity of the data is maintained. Many times, the storage side of digital evidence is the lowest cost in the process.

Many organizations will need to invest in certain specialized storage such as faraday bags, anti-static bags, and specific storage areas that are dry and free of potential contaminates for digital items.

With the world of digital devices and storage always growing the need for being able to process digital data is growing as well. Organizations need to take a proactive approach to train examiners at least with basic skills to be able to manage the demand that is rising. The turnaround time with an internal staff member being able to process vs outsourcing can show an immediate return that will be felt for years to come.

Training organizations include:





Forensic-Impact Articles

Small Businesses: Don’t Make These 7 Common Cybersecurity Mistakes

Small Businesses: Don’t Make These 7 Common Cybersecurity Mistakes

Guest Blog Post: Lance Cody-ValdezHackers are going after SMBs with a vengeance – 43 percent of all cyberattacks are directed toward these smaller companies, according to a Hacked report.  SMBs make for “soft” targets, as many don’t have basic cybersecurity safeguards...

Why is Triage a good step in Digital Forensics?

Why is Triage a good step in Digital Forensics?

Many people discount the value of triage. Investigators try to obtain all the data at once, which can be costly and unproductive. With the data gap gone between mobile and computer-related data, you can analyze terabytes now without breaking a sweat. Triage and...

Fall is full of new data in iOS 16 messages

Fall is full of new data in iOS 16 messages

With each fall we see changes in the smartphone world with new firmware updates that bring extra spice to the pumpkin spice season. This year was not an exception with iOS 16 showing lots of new data that will add to our digital investigations. iOS 16 held a lot of...