New patent highlights powerful technology in digital forensics

A European patent was granted to digital forensic experts, Evidence Talks, for their revolutionary technology Spektor Remote Forensics on 20 March 2013 with another pending in the US.

Nothing else provides forensic investigators with real-time remote access to process digital evidence with military level security, in a case managed environment. Although it was launched in 2007, the absence of a patent on this powerful technology meant its detailed information was not freely available.

“Spektor Remote Forensics means that organisations no longer need to send a technology expert to collect digital evidence from a site – now anybody can do it. Neither do they have to rely on accessing an existing network, or a person with the IT skills to set one up. This is vital news for those in industries where data holds IP, legal or military significance. So far it has dramatically reduced investigation lifecycles and can slash the associated running costs by 58–93%,” explained Andrew Sheldon, director of Evidence Talks in Milton Keynes, in the UK.

This ground-breaking combination of highly specialised hardware and software provides onsite speed to analysts who need to forensically investigate digital evidence. This means that, for example, within minutes a translator could be invited to view and interpret on-screen information, in real-time.

“Although there are solutions available that enable remote access to centralised evidence or across corporate domains, Spektor Remote Forensics is the only one that dynamically creates a secure network between experts and remote evidence on different networks in a fully case-managed environment,” commented Andrew.

The remote access to digital evidence travels through a dynamically created VPN tunnel rather than trying to pull and download information from the user’s computer so it can operate on very low bandwidths.

A case manager grants the appropriate forensic analyst permission to access evidence through FIMS (Forensic Incident Management Server). FIMS automatically creates an instant, highly encrypted dynamic network – which is why there is no need to access a pre-existing network.

Within the commercial arena, companies in finance, the media, biotechnology, law and healthcare will benefit. Spektor Remote Forensics gives municipal, law enforcement, security and defence organisations an opportunity to maintain their coverage on a reduced budget.

For example, soldiers are safer when seizing data in the field, because Spektor Remote Forensics dramatically reduces the time this takes. Corporations can use local staff to collect data rather than in-house or contracted experts leaving their laboratories. It slashes the travel, accommodation and staffing costs within the digital forensic investigation functions of governments and various service companies because forensic analysts can be on-site, in a virtual sense, within minutes.