The practice of digital investigations is changing. The volume, variety, and velocity of digital evidence is growing at an alarming rate, especially as mobile devices and cloud storage become more prevalent and data storage becomes cheaper. Investigations frequently span national borders and even continents. There has never been a more relevant time for investigators to review the way they handle digital evidence.
What does this mean for traditional investigative lab setups? Evolving workloads, larger data sets, and growing complexity often lead to case backlogs and resource gaps. Investigators must take advantage of the resources at their disposal—new technology, more efficient workflows, and each other—to create a hyperscaled investigation lab, an investigations hyperlab, to overcome a very real and significant professional challenge.
This paper lays out how to establish a hyperlab through proper preparation, treatment of evidence, and application of existing and emerging Nuix technology.