Free DME & DFIR Resources

There is more Digital & Multimedia Evidence (DME) than any other type of evidence today.
Working together we've expedited tens of thousands of criminal investigations.  Learn more

Can you believe it?  An entire year has flown by since I launched the Pro Upgrade subscription model.  Thank you to all who have subscribed & all who continue to participate!

I'm honored to be in a position where I can help facilitate secure information sharing, and such a powerful collective knowledgebase. 

Renewing Your Subscription Is Easy

Log-in, go to your profile (click the control panel link), go to the subscription tab.  For your convenience, I've pasted a few related KB articles below.

Let's keep on doing what we do, my friends; solve problems, help people.  I'm honored to work with you.  Be safe out there!

From teaching classes over the years I frequently hear that many agencies are using Photoshop 6 and 7, Paint, Photoshop Elements, Microsoft Picture It and other applications due to the lack of funds to purchase upgrades. There is nothing wrong using some of the older versions but there are several functions that the older versions do not support, like high bit depth processing, limited color space/model options and the lack of more sophisticated image processing algorithms (de-convolution, pattern removal using FFT).  I also understand that many agencies who would love to have PS CS3 Extended with all of the great plugins that have been developed will never get the funds to make these purchases.

One solution to the funding issue is Image J (http://rsb.info.nih.gov/ij/index.html) Image J is a free, open source application provided by the National Institutes of Health (NIH).  I not only have used this application for case work but to learn more about digital image processing algorithms. Image J is a very robust image processing and analysis tool set that has been referred to on the FVA list serve and recently in the book written by George Reis. This write-up is not a tutorial about Image J, it is meant to provide information about the application that may assist some readers.

The Scientific Working Group on Digital Evidence (SWGDE) is pleased to announce posting of the following fourteen new draft documents for public review and comment at https://www.swgde.org/documents/draft-released-for-comment

  • SWGDE Best Practices for Acquiring Online Content (21-F-001-1.1)
  • SWGDE Best Practices for Apple MacOS Forensic Acquisition (23-F-005-1.0)
  • SWGDE Best Practices for Digital Forensic Video Analysis (18-V-001-1.1)
  • SWGDE Best Practices for Drone Forensics (21-F-002-1.1)

As each day passes law enforcement and government agencies struggle with managing more sources of digital evidence and multimedia, like body worn cameras. The massive amounts of data storage required have led many to finally consider secure cloud-based storage solutions, but as some have found out, despite the minimal capital investment cloud storage costs can quickly exceed the LE & IT budgets of even the largest agencies. Let's break this down and talk specifically about digital evidence and archiving.

How are you archiving all of your digital evidence today? A tiered storage solution? Hybrid cloud solution? LTO tape? Hard drives? Optical discs (i.e. CD-R, DVD+/-R, BD-R)? Lots of questions and options, so lets talk specifically to the last group; those using optical discs.

1. What is File History
File History is a new backup service introduced in Windows 8. By default this feature is off and to turn it on, user has to select a backup location – either a network drive or external storage media. Thus, it does not allow user to use the same disk. File History backs up files of the Libraries, Desktop, Contacts and Favorites folders. There is an option to exclude any folder(s) that users don’t want to backup. Notice that File History is unable to backup your folders synced with cloud storage service(s). According to Microsoft, “File History doesn’t back up files on your PC that you have synced with SkyDrive, even if they’re in folders that File History backs up.” Once turned on, File History automatically backs up the folders after every hour by default; however this interval can be changed easily in advanced settings. In addition, at any time, user can manually run the service. File History appears as fhsvc in the Task Manager and some associated dlls are fhcfg.dll, fhcpl.dll and fhsvcctl.dll.

Full Story

The new Media-Geek site layout is more intuitive (I hope) and accessible, and it should also load faster in your browser.  Sure there are a few little scripting bugs to hunt down and squash, but for the most part the site seems to be functioning in all modern browsers.  I hope you find the new layout an improvement.

Did you know you can make your profile public? By default profiles are private and only accessible to members who are logged in to the site, but if you want you can make yours available to the general public.  Check out your profile privacy settings more (Click on Community to go to the Community main page, then select "Privacy" from the Profile menu option.

Smart Search

DME Resources Newsletter

Sign-up for the DME Resources"I may occasionally send an email" newsletter. Maybe quarterly? Semi-annually?

Well, what I can tell you is that your information will not be shared. See my Privacy Policy.

NOTE: Members of my site are NOT auto-subscribed or un-subscribed from this newsletter; they must manually Opt-In/Out.

Subscribe Today!

Who Doesn't Love Cookies?
DME Resources may place one or more Cookies on your computer. Cookies do not contain any personally identifying information, they allow me to customize my site based on your preferences. If you Decline cookies from my site, you may not be able to use all of the site's features.