Search, seizure and on-scene investigation of digital devices, 26 February 2025
-
Provides contemporary best practice and current thinking around the search, seizure and on-scene investigation of digital devices.
-
Aimed at digital forensics staff and Digital Media Investigators or anyone working in a digital role who want to maximise the potential of the data/intelligence from digital devices right from the outset of the crime scene.
-
Best practice around on-scene triage principles and highlights any missed opportunities and investigative opportunities that could have a major impact on an investigation.
-
Provides advice around applying the investigative mindset to digital investigations.
-
The workshop is operationally focussed and will provide practical advice underpinned by relevant guidance and legislation to ensure you maximise the potential of digital evidence
-
It will also provides a forum for practitioners to share their experiences and network with their peers in a safe and supportive environment.
-
Held online via Teams.
Our speaker
Lewis has 30 years’ experience firstly working as an intelligence officer and then specialising in digital evidence. He has previously worked for the Met Police, the former National Criminal Intelligence Service, National Crime Squad, Serious and Organised Crime Agency and latterly the National Crime Agency where he has worked on numerous major investigations where digital evidence was pivotal to the investigation.
Workshop content
Planning for success
-
Creating a defined strategy from the outset to define your activity. Key considerations and common mistakes/pitfalls before you arrive on-scene.
-
Practical considerations include ensure you have the relevant kit to support your activity.
Through the door
-
Key considerations, using the investigative mindset underpinned by relevant guidance/legislation to carry out your on-scene investigation
Triaging best practice
-
identifying which devices, systems, and software components to investigate first: problems, challenges and best practice.
Examination of devices
-
Key considerations around passwords, messages, locked phones, disappearing messages and videos, cloud data, RAM, logged in accounts, encryption, mounted containers, imaging to allow for business continuity.
-
Other key considerations around handsets, SIMs of hardened devices, IMEI numbers, other devices on the account that might be given to other people in the household.
-
Best practice around suspect devices: secure folders, play accounts, notifications, electronic recovery
Retrieving data
-
Using specialist tools to retrieve data from devices and systems; issues around evidence capture. Best practice around imaging on-scene in line with the AG guidelines.
Providing reports
-
Delivering reports, evidential statements, and continuity processes
Providing technical advice
-
Offering technical advice and assistance to investigating officers and working as part of the team
Key powers and legislation to support your search and seizure activity
A look at the powers that are used to conduct search/seizure activity including:
-
Section 18 PACE relates to premises searches post arrest, generally with the authority of an Inspector prior to being conducted. Search for evidence relating to the offence and like offences. Only needs suspicion of evidence at location.
-
Section 32 PACE relates to person and premises searches post arrest. Search of premises limited to place immediately prior to arrest. Limited to evidence related to the offence which arrested for.
-
Section 19 PACE power to seize items which are evidence of an offence. This can include section 19.4 Cloud data.
-
Search Warrant - PACE again and reference to identifying material covered.
-
Section 50/51 - Criminal Justice and Police Act 2001 worth considering when you just can't reach Section 19 PACE levels. Does this invalidate FSR codes
-
Interception of communications - specifically Investigatory Powers Act 2016
HOW TO BOOK
Cost: £209.00 + VAT (GBP) per delegate (LEA and Government Agency rate). £299.99 + VAT (Industry rate).
Group bookings: We offer various discounts for group bookings depending on numbers, please contact us for details.
Booking: Please send the delegates name(s), email address(es) and purchase order (made out to The Investigator) to booking@the-investigator.co.uk or telephone +44(0)844 660 8707 for further information.
Payment can be made by PayPal/debit/credit card (corporate card fees apply + 3%). The meeting link will be sent out 7 days before the event.