A Forensic Network is a series of processing and imaging computers connected and integrated directly with a high-speed, high-capacity server to share resources. The file server operates as the core of the Forensic Network and can be used as a central storage facility for Forensic Images as well as applications software for use by the client processing and imaging stations. Workstation clients on the network perform the actual imaging and processing tasks, while the central file server stores the images and case work. High speed scanners and color printers can also be made available as shared resources on the network. Multiple forensic clients can access case and image files simultaneously without duplicating information on several workstations. File and image storage space is centralized at the file server reducing the localized storage requirements at the workstation clients.

How Can a Forensic Network be Used?

The client workstations in a forensic network, are used for the actual acquisition of forensic images. However, rather than storing those images locally on each client, the images are recorded directly to the high capacity storage array on the file server over the network. These workstations can be pre-configured to access the network directly from DOS or Windows operating environments. Only a minimum of local storage is required on each client processing station for the operating system(s) and work space. In fact, DOS floppy boot disk images are provided such that each station can be brought completely onto the network requiring absolutely no hard drive facilities at all!

The forensic file server maintains a high capacity RAID-5 storage array. Two redundant power supplies are employed as a dedicated power source for the RAID array itself. This online storage is used for maintaining forensic images as well as application and forensic software and utilities. The file server is also configured with a Robotic Tape Library for system backups and offline storage of case information and images once online access to the information is no longer required. This file server comes pre-configured and installed with Novell Open Enterprise Server. Microsoft Certified (MCSE, MCPS) and Novell Certified (CNA, CNE) personnel on our staff ensure that these network operating systems are properly configured and installed prior to delivery.

Once the forensic images are recorded directly on file server storage space, any forensic client workstation on the network can be used to process the information. Images can be restored directly from the network to work drives on each client or processed in place on the file server. Multiple clients can be used to process a single image simultaneously from the network without requiring local storage at the workstations. One or more stations on the network may be optionally configured with scanners to record hard copy images directly to the file server. One or more shared printers may be installed on the network in order to provide print services to all the client workstations.

The file server can also be used to store "functional" images of operating environments for testing and analysis. Symantec Ghost images can be pre-configured and stored on the file server and then restored to any of the network clients as needed. Want to see how a particular piece of software behaves in Windows95, Windows98 or Windows NT? Deployment of pre-configured functional images can be a tremendous time saver when needed to research or test the behavior of multiple operating systems!

The forensic file server not only serves as a centralized facility for the storage of forensic images, case information, and functional images, but also a resource for the production and printing of reports and other day-to-day operational requirements. Furthermore, this centralized resource can also be used to allow or deny access to any of the forensic images or information on the laboratory network as your organization's requirements dictate.

Why a Forensic Network?

Faster Than a Local Hard Drive
Image a hard drive directly to a Forensic File Server 25% faster than you can image to a local hard drive... DIRECTLY to the server over standard Copper Gigabit Ethernet. There's no need to image to your workstation and then copy it up to a slow server.

Significantly Faster Than a Windows Server
A Forensically Optimized Network Operating System 300% faster than Windows Server running on the same hardware! Here's the Proof (These EnCase imaging benchmarks were from May 2006 - our current hardware performance is even better.)

2.5 to 3 GB/Minute
Image a 30 GB drive in less than 12 minutes, an 80 GB drive in just over 30 minutes... DIRECTLY to the server.

Keep Your Existing Clients
Use the same Operating Systems on your desktop as always (i.e. Windows XP). Our Forensic Network Operating System integrates seamlessly with your existing clients.

Centralized File Storage
Consolidate your storage investment. No need to buy lots of standalone hard drives to pass around your lab. No wondering where that case data is. Stop wasting money on individual hard drives or portable RAID arrays.

Centralized Access Control/Security
Decide who has access to what evidence from a single vantage point. Determine which investigators have access to which cases and optionally log all access to your evidence.

Centralized File Sharing
Allow multiple investigators to work on a single case using a single set of Data Files.

Centralized Data Backup
Backup and Restore data from a single vantage point into a single offline repository using a 16 tape DLT robotic tape library. Maintain your data in two separate locations at all times (online and offline).

0 to 60 in Two Days
FREDC equipment is typically installed in 2 days. Equipment assembly and configuration on Day 1, and your orientation/training on Day 2. Take your lab from an outdated workstation centric environment to a fully optimized forensic network in 2 days. (Your MIS / IT guys have been relying on networks since the late 80's - now its your turn to blow them away.)

Completely Configured
It's a complete network in a rack including all TCP/IP services (DNS / DHCP). Just connect your workstations with Cat 5e or Cat6 Gigabit Ethernet, load the network client, and you're ready to go! We establish a proven storage architecture that makes your access control simple and your backup activities manageable. We even set up your backup jobs and establish your automatic drive mappings for you. Instead of imaging to a local hard drive (i.e. "D:") you simply use your network drive letters instead (i.e. "R:").

Easy to Maintain
We provide approximately a full day of orientation/training for the person(s) who will be managing the server. Since our server runs like an appliance (no blue screens, no daily patches), the routine tasks are minimal. Adding/Removing Investigator accounts, performing Backups, and modifying access control (if required) are essentially all that needs to be done.

Easy to Use
The only thing your investigators (users) will notice is a different login screen on their workstations and a bunch of new (network) drive letters. Everything else stays the same!

• How much online RAID-5 storage do you require: 16.0 TB or more?
• How many Forensic Clients would you like in your network:  FRED's, FREDDIEs, or Both?
• Would you like a Shared Network Printer:  B&W Laser, Color Laser, or Color Phaser?
• Do you require a Scanner or other Imaging device on any of your clients?
• Would you like Digital Intelligence to physically install the Network at your facility?
• Would you like Digital Intelligence to customize the configuration of your network to meet your security, administration, or functional requirements?
• Would you like training on the day-to-day use and administration of your Forensic Network?
• Would you like a support contract to assist in the day-to-day administration and use of your Forensic Network?

Read More About the FREDC Forensic Network Solution Here

			FREDC - The Forensic Network Solution FREDC is our Forensic Recovery of Evidence Data Center. FREDC provides fully integrated processing power and flexibility far beyond any forensic solution available.