Cyber Forensics Division,
Armstrong Police Department

The Armstrong Police Cyber Forensics Division (CFD) is unique among local and state law enforcement agencies as well as university police departments in many respects. The division currently consists of a supervisory police lieutenant and six trained and certified forensics analysts. The lieutenant is an attorney admitted to the Georgia Bar and an expert in cyber and international law. All but one of the technicians are police officers and assigned to patrol shifts giving the CFD true 24 hour per day, 365 days per year operational capability.

The CFD operates a state of the art digital forensics lab. It is equipped with two Forensics Recovery of Evidence Devices (FRED) manufactured by Digital Intelligence, FTK software suite, Cellebrite Universal Forensics Extraction Device (UFED) with Physical Extractor/Analyzer and related equipment and software.

The CFD's supervisor lieutenant ensures that all services provided by the CFD are legally and forensically sound. This level of legal and technical oversight is unique to the CFD.

The CFD can provide a wide range of services involving the forensics examination of computers, cell phones, smart phones, and other electronic devices:

Case by case legal evaluation for each cyber investigative initiative
Imaging of digital storage devices with confirmation of evidential integrity.
Data preservation and recovery services.
Identify and recover erased or deleted data (Pictures, Cell phone calls, Email, Text messages, Files, and User activity).
Document user and file activity
Data sifting that includes advanced key word searches, date searching, and data segregation.
Data linking
Authenticate data files.
Provide historical record of the content of files, including recovered data and files.
On-scene recovery and preservation of volatile memory in forensically sound manner
On-scene preview of hard drives/computer systems
Properly prepare and package electronic storage devices for evidence
Conduct proactive computer system audits
Data wiping service
24 hours/365 day availability