Solution Guide

2 Contents
Configure a Collector Profile . . . . . . . . . . . . 23
Deploy Triage Tools
. . . . . . . . . . . . . . . . . 33
Reviewing Collected Files After Triage
. . . . . . . 36
3 Ingest . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Datacenter-enabled EnCase 6 . . . . . . . . . . . . . . 39
Single-server Solution
. . . . . . . . . . . . . . . 40
Multi-server Solution (High Availability)
. . . . . . 40
Datacenter-enabled FTK 1.8
. . . . . . . . . . . . . . . 42
Single FTK 1.8 Session Per Desktop
. . . . . . . . 42
Multiple FTK 1.8 Sessions Per Desktop
. . . . . . . 42
Datacenter-enabled FTK 3
. . . . . . . . . . . . . . . . 43
Single FTK 3 Server Solution
. . . . . . . . . . . . 44
Multiserver Solution (No High Availability)
. . . . . 44
FTK 3 Lab Edition
. . . . . . . . . . . . . . . . . . . . . 46
Multiple Forensics Applications Delivered to
One Desktop
. . . . . . . . . . . . . . . . . . . . . . . 47
Network Configuration Recommendations
. . . . . . . 48
How to Perform Ingest Using the Dell Digital
Forensics Solution
. . . . . . . . . . . . . . . . . . . . 51
Ingest Using SPEKTOR
. . . . . . . . . . . . . . . 51
Ingest Using EnCase
. . . . . . . . . . . . . . . . 53
Ingest Using FTK 1.8 and 3.0 Datacenter-enabled
. 56
Ingest Using FTK 3 Lab Edition
. . . . . . . . . . . 59
4Store
. . . . . . . . . . . . . . . . . . . . . . . . . . .
63
Efficiency. . . . . . . . . . . . . . . . . . . . . . . . . 63