Solution Guide
Ingest 39
Ingest
The Ingest stage of the Dell Digital Forensics Solution consists of creating an
image of the target storage device (if that has not already been accomplished
during the Triage stage) then transferring that image to a centralized location
from which it may be accessed for analysis. To move the forensics applications
into the datacenter and still preserve the standard user experience, Dell, in
partnership with Citrix, has created several distinct software packages for the
mainline forensics applications to move them seamlessly into the data center,
creating a more available, faster, and capable user experience.
As part of its Digital Forensics Solution, Dell has currently certified the
following forensics applications:
• SPEKTOR
•EnCase 6
•FTK 1.8
• FTK 3 standalone version
•FTK 3 Lab
Any of these forensics applications may be used in any combination for
simultaneous access from a single user device.
Datacenter-enabled EnCase 6
In the following solution example, the EnCase 6 application is hosted on a Dell
server device(s) in the datacenter, providing multiuser EnCase 6 sessions.
Store Analyze
Archive
Triage
Present