Digital Triage Forensics book cover

Digital Triage Forensics

Processing the Digital Crime Scene

Digital triage forensics (DTF) is a procedural model for the investigation of digital crime scenes including both traditional crime scenes and the more complex battlefield crime scenes. The U.S. Army and other traditional police agencies use this model for current digital forensic applications. The tool, training, and techniques from this practice are being brought to the public in this book for the first time. Now corporations, law enforcement, and consultants can benefit from the unique perspectives of the experts who coined Digital Triage Forensics.

Paperback, 280 Pages

Published: June 2010

Imprint: Syngress

ISBN: 978-1-59749-596-7


  • "Syngress [is] by far the best publisher of digital forensics and general security books…I’d certainly recommend this book and after reading through it…it looks great. It’s written by the guys who coined the use of the word Triage in this context, so they know what they are talking about, and unlike many real technical books this one really does dig into the investigative techniques that should be used at the crime scene, including quite an interesting analysis of ‘Battlefield Crime Scenes’, where a triage approach is by far the only way to successfully approach the forensics problem." -Tony Campbell, Publisher, Digital Forensics Magazine


  • Chapter 1 New Age of Warfare: How Digital Forensics is Reshaping Today’s Military

    Yesterday’s "Booby Trap" Is Today’s Improvised Explosive Device (IED)

    The Invention of Weapons Intelligence Teams (WIT)

    "CSI" Baghdad: Today’s Intelligence Is Tomorrows Evidence

    Actionable Intelligence and Its Effect on the Battlefield

    Soldiers to "Battlefield Cops"



    Chapter 2 Digital Triage Forensics and Battlefield Forensics


    Digital Triage Forensics and Battlefield Forensics

    How does Evidence go from the Battlefield to the Lab?

    Five Levels of Exploitation of WTI Materials



    Chapter 3 Conducting Pre/Post Blast Investigations


    WITs Role Within the EOD Team

    Pre Mission Preparations

    Scene Safety

    On Scene IED Analysis

    Photograph! Photograph! Photograph!

    Pre Blast Investigative Steps

    Post Blast Investigative Steps

    Detainee Operations as it Pertains to WIT


    Chapter 4 Using the DTF Model to Process Digital Media

    The changing location of Digital Evidence containers

    What hardware do I need to conduct a Cradle to Grave Battlefield investigation

    Characteristics of Digital Media

    Stephen’s Quick and Dirty Guide to Understanding Digital Forensics

    Brief Overview of Digital Storage Concepts

    Processing Digital Media using the Digital Triage Forensic Model


    Chapter 5 Using the DTF Model to Collect and Process Cell Phones and SIM Cards

    Cellular Devices Are Replacing the Laptop

    Freeware and Shareware as Cell Phone Forensic/Analysis Tools

    Using Cross Validation with your Tools

    Triage Processing of Cellular Devices

    Using the MFC to identify the Cellular Device

    Collection Concerns with Cellular Devices

    Don't Push That Button

    Isolating the Cellular Device

    Using the HTCI Isolation Chamber

    Processing the Cell Phone


    Chapter 6 The Changing Role of a Digital Forensic Investigator

    The Solution




advert image