What we do

CCL provides the following services to law enforcement agencies:

• Collection and delivery of exhibits
• Forensic imaging of computers / laptops / other removable media
• Forensic analysis of imaged data
• Regular OIC contact
• Flexible reporting styles, tailored to customer requirements
• On-site work / raid support – where required
• Court appearances – where required
• Adhere to forensic regulator and ACPO guidelines
• Push the boundaries of evidential opportunities
• Rapid turnaround – where required
• A commitment to keep costs down by tailoring the investigation.

How we do it

We are committed to providing a quality service by:

• Discussing every case strategy with you
• Understanding your reporting requirements
• Working in secure, modern, purpose-built laboratories
• Employing experienced staff including ex-HTCU analysts
• Following ISO9001, ISO27001 and ISO17025
• Ensuring all staff are security cleared
• Providing thorough courtroom training
• Investing in research and development.

More detail

CCL has a long track record in providing digital forensic services to law enforcement agencies. This has been based upon our philosophy of providing an end-to-end service comprising:

• Providing information, resources and support to law enforcement agencies through our knowledge base
• Adherence to ACPO guidelines at all times
• Collection and delivery of exhibits using security-cleared drivers and tracker-fitted vehicles
• Exhibit continuity, managed by a sophisticated exhibit tracking system, following documented procedures
• Secure storage of exhibits in purpose-built exhibit store
• Contact with the OIC at the very start of the analysis process to ensure case objectives are met
• Forensic imaging of computer hard drives and analysis of forensic images by staff who receive regular training in new forensic developments, backed up by a team of research and development analysts who are constantly researching how to analyse and interpret the increasing amount of data stored on hard drives
• Regular contact with the OIC throughout the analysis process
• A comprehensive report, tailored to the requirements of the individual law enforcement agency, detailing the evidence and the processes used to identify it
• Generated exhibits provided in whatever form the law enforcement agency requires
• Witness statement where necessary
• Court appearance where necessary
• Secure delivery of exhibits – along with reports, generated exhibits and all supporting material
• Ongoing support and assistance once analysis is complete.

Challenges

Having worked for many years with some of the UK’s law enforcement agencies, CCL recognises that there are a number of significant challenges in the field of computer forensics:

• Increasing numbers of computers and laptops requiring analysis in criminal investigations
• Increasing data capacities of computers, laptops and external storage
• Tightening of public sector budgets
• Pressures on high-tech crime units react swiftly when exhibits are submitted
• Demands on police forces to provide a value for money service.

We recognise – and embrace – these challenges and work closely with law enforcement agencies to provide a tailored cost-effective solution.

Value for money

CCL provides a value for money computer forensics service.

Work is carried out either on an ad-hoc basis or under formal contract for larger volumes of computers requiring analysis.

Whichever method is most appropriate for a particular police force, CCL provides a value for money service by:

• Agreeing a fixed price and fixed scope of the analysis to be carried out – ensuring costs do not escalate unexpectedly
• Utilising tools and techniques created by our in-house research and development team to ensure the most effective forensic analysis – adhering, of course, to ACPO guidelines
• Using our considerable image hash-set to automate otherwise lengthy grading processes
• Ensuring a close liaison with our mobile phone forensics laboratory for cases involving both computers and mobile phones
• Demonstrating a commitment to working with the OIC/SIO/HTCU to ensure that a properly-targeted investigation is carried out
• Investing in training (courtroom and technical) of all staff conducting casework
• Adhering at all times to ISO17025 – as required by the Home Office forensic science regulator.

Devices

The following is a non-exhaustive list of the devices from which CCL can typically extract media. If a particular device is not on this list, please contact us on 01789 261200.

• Desktop computers
• Laptops
• Netbooks
• Servers.

All the above running operating systems including:

• All versions of Microsoft Windows
• All versions of Apple operating systems
• LINUX/UNIX.

Tablet PCs - including:

• iPad
• Dell Streak
• Samsung Galaxy Tab.

Digital cameras and memory cards

USB "thumb" drives

Optical Media including

• CD
• DVD
• Blu-Ray
• HD DVD.

Flash memory

External (removable) storage devices

Other magnetic media including:

• Tapes (LTO, DLT, DDS and others)
• ZIP drives
• JAZ drives
• Floppy disks.

Solid state disk drives

Live memory acquisition

Magstripe (magnetic strip) cards and readers

Printers / scanners / multifunction devices

Games consoles including:

• PS3
• PSP
• X-Box
• Nintendo Wii.

Sat navs – all major manufacturers including:

• TomTom
• Garmin
• Navman
• Magellan
• Navigon
• Mio
• Aviation and marine devices.