Solution Guide

68 Store
case data. This approach reduces the cost of storage in the forensics lab because
all data does not need to be kept in the lab, no matter what the current relevance,
it can be moved seamlessly to slower storage.
Trial (Present) – In the event of the case making it to trial, the forensics lab will
want to have quick access to the evidence and case data to respond to any
questions during the court case.
Custodial Sentence (Archive) – In the event of a custodial sentence, most
countries require the Police or justice department to keep the evidence and case
files for a minimum period or the length of the custodial sentence plus a
reasonable time for appeal or 99 years. The goal here is to put the data onto a
long term inexpensive storage medium that protects the integrity and
confidentially of the data.
Appeal (Present) – In the event of appeal, the case data and evidence may need
to be recalled for further analysis or scrutiny. This recall needs to happen in a
very timely manner, but the data is very rarely required instantaneously.
Delete – In most countries around the globe, public sector bodies are not
allowed to hold data indefinitely once the data has reached the legal limit of
retention. A simple process needs to be available to delete that data. This
process may be required also in the case where a not guilty verdict has been
returned, and the data also needs to be deleted.
How to Set Up Storage Security Using the Dell
Digital Forensics Solution and Active Directory
Creating and Populating Groups in Active Directory
Groups are established through Active Directory Domain Services (Windows
Server 2008).
Creating a New Group (Windows Server 2008)
1 Click Start → Administrative Tools → Active Directory Administrative
Center
.
2 In the navigation pane, right-click the node to which you want to add a new
group, click
New . Then click Group .
3 Enter the name of the new group.