Expert Participation in Investigative Actions

This service is intended only for law enforcement agencies.

During preparation and conduct of tactical investigative actions, law enforcement officials are confronted with the need to collect and examine computer information. The purpose of this service is to involve highly qualified experts from Group-IB’s computer forensics and data recovery lab to assist in detecting, identifying, and seizing data and documents of interest to the law enforcement agencies.

Group-IB’s specialists perform the following range of services related to participation in investigative actions:

  • Consulting law enforcement officers regarding detection, identification, and seizure of digital data media in a particular situation;
  • Participation by a specialist in an action conducted by law enforcement agencies;
  • Assistance in detection, identification, and seizure of digital data media and documents related to the ongoing actions;
  • Searching for computer information in accordance with specified characteristics;
  • Copying forensically relevant data from media which cannot be seized for whatever reason;
  • Assistance in identifying and questioning persons who may have information relevant to the case;
  • Assistance in composing a report (with issues requiring specialized knowledge).

As part of these services, the specialist performs the following:

  • Detecting, identifying, shutting down, packaging, and sealing the digital data media;
  • Copying the contents of volatile storage devices (RAM) to the specialist’s digital data media;
  • Copying network traffic to the specialist’s digital data media;
  • Detecting documents of interest to the law enforcement agencies on the digital data media based on set criteria (keywords);
  • Identifying the installed software;
  • Other services.

Our experts regularly participate in tactical investigative actions conducted by law enforcement agencies, assisting in the identification, seizure, and analysis of digital evidence. Every Group-IB expert taking part in these tactical incident responses, as well as involved in conducting computer forensics, possesses the necessary qualifications and experience required for the specialist status as per the Russian legislation.

Expert Participation in Investigative Actions

Group-IB’s criminologists arrive on the scene of the action with a set of all necessary hardware and software, able to quickly and efficiently address any raised issue. As a result, the law enforcement officials receive the seized data and documents, which can then be used as evidence in a criminal case.

The next step in providing the evidentiary base can be the transfer of the objects seized during the investigative action to Group-IB’s computer forensics and data recovery lab. The materials are sent based on an order issued as part of an ongoing criminal investigation with an indication of issued to be addressed during the course of the examination.

Expert Participation in Investigative Actions

The proper collection of digital evidence in accordance with applicable legal requirements is a necessary step in the course of investigative actions.

As a result of participation of our experts in actions conducted by law enforcement agencies, you will receive the following:

  • Properly executed documentation. The media and data collected during the action are documented in accordance with applicable legal requirements, ensuring that the resulting evidentiary base will be considered and admitted by the judicial authorities.
  • Full scope of information regarding the incident. Data copying is performed on all sources of forensically relevant information, allowing restoration of the circumstances of the incident regardless of attempts by criminals to conceal the traces of their actions.
  • Independence and reliability of the resulting data. A reliable result achieved during the course of the action is ensured by the comprehensiveness and accuracy of determining the circumstances of the incident according to set parameters. The involved independent experts will ensure the reliability of data in subsequent investigation of the case.
  • Ability to conduct a forensic investigation. The computer forensics and data recovery lab operates as part of Group-IB, and the collected data can be sent there for a comprehensive independent examination. This step ensures detailed information regarding the seized data. The expert determination is accepted by courts as admissible evidence for civil, administrative, and criminal proceedings.

Contact Us:

+1 917 809-47-41
help@group-ib.com

More information