ScumBlock.com

EJM Digital Has partnered with the National Law Enforcement and Corrections Technology Center (NLECTC) and KB Solutions to provide a one day course in the use of the new standard in presumptive examinations of computers in the field by law enforcement, Field Search.

Erik Is a Certified Field Search Instructor (CFSI), and your staff can quickly and easily become certified users of this powerful tool for law enforcement.

What is Field Search?

The Field Search software suite of products was developed by the National Law Enforcement and Corrections Technology Center – Rocky Mountain Region (NLECTC-Rocky Mountain).

The software is designed specifically for use in the field by non-technical criminal justice personnel to quickly and efficiently search an offender’s computer and create a detailed report of their findings. Field Search for Windows® (FS-Win) runs live in a native Windows ® environment. Similarly, Field Search for Macintosh (FS-Mac) runs live in the native Mac OS X® environment. This approach provides a fast, powerful yet easy method of examining and monitoring computer use. In essence Field Search blends preview functions with evidence gathering and reporting functions.

Originally designed to assist probation and parole officers in sex offender management the Field Search suite is equally effective in first responder situations or examining computers for evidence of other crimes.

This software is provided free of charge to public sector criminal justice agencies. However, Field Search should be approved for use and supported by your agency's policies and procedures before it is used in the field

Field Search Features

Browser History Search

Sample Browser History. Click image to view larger version.

Field Search quickly and automatically retrieves Internet histories from the following popular browsers:

Internet Explorer history and cookies.
Netscape history and cookies.
Firefox history and cookies.
Opera history and cookies.

Results are displayed in an easy-to-read format that includes the date and time each website was visited.

Results can be sorted in a number of ways to help the officer understand an offender's surfing patterns.

Items are selected for inclusion in the report by a single mouse click. Items also can be seized to removable media easily. Officers also can choose to search free space for orphaned (deleted) history records.

Image Search

Sample Image Gallery. Click image to view larger version.

Field Search quickly finds all logical images of the following formats, even if images are zipped:

Images are displayed in a gallery view.

Items are selected for inclusion in the report by a single mouse click. Images also can be easily seized to removable media.

Full path, CAM (Created, Accessed, Modified) dates, and image sizes are retrieved for an image by a single mouse click.

Field Search contains an internal viewer that allows any image in the gallery to be viewed full size by double-clicking on the image.

Text Search

Field Search allows officers to search for text (words and phrases) in any logical file. The text search will even open zipped files if they are not password protected.

Sample Text Search Screen. Click image to view larger version.

Files with any hits are displayed with associated date/time stamps.

Hit lists may be filtered and sorted in a number of ways to enhance the analysis.

Items can be selected for inclusion in the report by a single mouse click. Items also can be easily seized to removable media.

Multiple strings can be simultaneously searched. Searches can be limited to only certain file types to expedite the search.

The flexible input format allows for searches of header and footer date to identify unique file types.

Reports

Field Search has a built-in report function. Once items are selected for inclusion, the report is automatically created.

Sample Report. Click image to view larger version

Each item's associated path and date/time stamp is included in the report.

The report can be printed or exported to removable media as either an RTF file or a PDF file.

System information is automatically added to the report. Additional space is provided for the officer

to add identifying information and comments.

Export Data

Field Search can export data to spreadsheets for further analysis.

All records are exported regardless of whether the record was selected for inclusion in the report.

The officer can choose to export any of the following data:

Internet Explorer history and cookies.
Netscape history and cookies.
Firefox history and cookies.
Opera history and cookies.
Test search hits.
Raw Scans of orphaned URL histories.

All date/time stamps associated with the history records and text search hits are exported along with the data for each item.

Data exported to spreadsheets can be used to produce more complex and thorough analysis of the offender's computer use.

All data is exported in standard Excel® format and is easily imported into almost any spreadsheet or database package.

Training

Erik will come to your agency and present an exciting 8 hour course on the use of Field Search. Your staff will:

Learn step by step how to use Field Search during probation and parole searches, or search as part of new investigations or “knock and talk” consent searches.
Locate Windows'® and MAC ® forensic artifacts, conduct text, video, and image searches, and recover browser history records.
Review lists of “most recently used (MRU)” files and folders on the offender’s computer.
Effectively use the field examination software tools, including Field Search, distributed free to each class participant.
Produce and export a complete customized report on a field examination.
Receive official certification from NLECTC. Your staff will be certified in the use of Field Search so court testimony and your agency’s reputation will be rock solid.

Each Student receives the following:

A USB "flash drive" Preloaded with the most recent version of the Free Field Search software for both PCs and Macs. Ready for immediate deployment.
29 free additional pieces of software designed to enhance the investigations of Field Search Users.
A "Multi" flash card reader. This card reader allows investigators to insert media cards from items such as digital cameras or even Micro SD cards from cellular telephones into their card readers and include them into their Field Search investigation.
A laminated "quick reference" card for easy use in the field.

Field Search Training

Calendar