The DataFerret
WHAT IS THE "DataFerret™"?
DataFerret™ is a self-contained device that attaches to a computer and utilizes forensic software and techniques to perform a forensic capture of the data on that machine.
This process is done via a “plug-and-play” methodology that makes it simple for anyone to perform the capture. Using a 2.0 USB connection, the DataFerret runs the capture software, keeps a chain-of-custody log, performs hash algorithms, and knows when it’s done! The user then disconnects the DataFerret, completes chain-of-custody information on a secure evidence bag, puts the DataFerret in the bag, and sends it back to the Lab for processing. The evidence bag can only be used one time. If anyone tampers with the bag, it is readily apparent. Capturing the drive is only step one of the DataFerret process. You must return the DataFerret to the Lab to retrieve the captured image.
The only equipment that will be needed is one DataFerret kit per computer. Each kit contains one DataFerret, USB cable, anti-static bag, self-sealing evidence bag, and a "Don't Panic" card.
WHAT MAKES IT SO COST EFFECTIVE?
If you compare a traditional local collection of 15 systems, you could expect the cost to range between $1,500.00 and $2,000.00 per computer, or $22,500 to $30,000.00 for just the collection portion of the project. You might receive some economies-of-scale savings for a project of this nature. A realistic budget for a collection like this would be $15,000 for collection, verification, related paperwork (Evidence intake and chain-of-custody tracking). Employing the DataFerret technology reduces that cost to approximately $600.00 per computer, or $9,000.00 for the same services.
DataFerret is engineered so your client, a designated employee or a para-professional can plug the unit into any 2.0 USB port on the computer, follow a few very simple on-screen instructions and produce a forensically sound capture.
