FBI Computer Forensics Training

FBI computer forensics training ensures proper handling of digital evidence.

Desktop computers, netbooks, smart phones and other electronic devices often contain crucial evidence in a variety of criminal cases---everything from identity theft to sex crimes. In its Regional Computer Forensics Laboratories, the Federal Bureau of Investigation hunts for clues in data stored on devices and media. The FBI also trains agents and local law enforcement in computer forensics so that no virtual stone goes unturned.

Size

As of 2009, the FBI operates 14 Regional Computer Forensics Laboratories throughout the United States, with two more labs in development, according to the RCFL "Annual Report for Fiscal Year 2009." The RCFL states that during fiscal year 2009, a total of 5,404 law enforcement personnel received training in digital forensics. In addition, agents and law enforcement officers processed 2,334 terabytes of data---the "equivalent of 1,167 academic libraries" worth of information.

Types

FBI computer forensics training includes courses in evidence handling as well as specific technologies and types of digital crime. For example, in the seizing and handling of digital evidence I, II and III courses officers learn the types of digital evidence they will encounter while serving search warrants. They also learn how to dismantle systems, itemize evidence, document system configurations and ship the evidence safely. Other courses cover specific operating systems. Officers also receive training in Internet crimes, as well as the Case Agent Investigative Review tool, which allows digital evidence examiners to access results online, according to the RCFL website.

Function

FBI computer forensics training paves the way for law enforcement officers and agents to stay on top of technological and legal developments in digital evidence. Without this knowledge, criminal cases could crumble due to mishandling of evidence or inadequate tools or facilities. For example, in the publication "Managing Your Digital Evidence: What Every Law Enforcement Executive Must Know," the RCFL advises that "insufficient AC and power can cause system failures or crashes" that lead to lost evidence. Likewise, law enforcement personnel might inadvertently destroy digital evidence if they do not know which tools work best for specific devices or types of data.

FBI computer forensics training also saves local law enforcement money and resources. The RCFL advises that it costs millions to build a lab and resources; therefore, using the RCFL training and resources eases budget burdens on local law enforcement.

Significance

FBI computer forensics training through the RCFL program has resulted in significant prosecutions. In May 2010, the "Heart of America" RCFL assisted in a terrorism investigation that led to a guilty plea by a Kansas City man, according to the RCFL website. The same RCFL helped to lock up a child molester for 35 years, notes the RCFL website. Other successful prosecutions based on computer forensics include murders and attempted bombings.

Misconceptions

Computer forensics training involves more than hard drives and digital crime. It also includes cell phones, digital cameras, flash drives, global positioning systems and media such as DVDs or CDs---with each type of media requiring different policies, training and tools, according to the RCFL website.

References

• Regional Computer Forensics Laboratory: Annual Report for Fiscal Year 2009
• Regional Computer Forensics Laboratory: Annual Report for Fiscal Year 2009: FY09 Accomplishments
• Regional Computer Forensics Laboratory: Course Descriptions
• Regional Computer Forensics Laboratory: Course Descriptions: Law Enforcement Personnel
• Regional Computer Forensics Laboratory: Managing Your Digital Evidence: What Every Law Enforcement Executive Must Know