D.I.M.

Slide 1: WWW.DFLABS.COM 1 Copyright 2008 DFLabs Srl Italy

Slide 2: A functioning implementation: D.I.M. DFLabs Digital Investigation Manager (D.I.M.) is a patent pending software which has been designed and developed to support operators in: Preparing documentation related to Incident Response procedures Managing complex Forensics Acquisitions procedures Creating an inventory and chain of custody for equipment and media The tool provides step-by-step assistance to investigators in setting up and managing their cases 2 Copyright 2008 DFLabs Srl Italy

Slide 3: D.I.M. Features General Info Photographic Documentation Deliverables Operations Timeline Chain of Custody Form Expense Form Reporting Digital Investigation Manager born to Support incident response • Global Reports • Operation Timeline • Digital Forensic Support • Preservation Phase Support Multi-User Environment • Unlimited number of cases • Local and Remote Database • Synchronization Module Total logging Total Barcode and RFID interaction 3 Copyright 2008 DFLabs Srl Italy

Slide 4: Procedure Support D.I.M. can support both documental and operating procedures, i.e. : • Incident Reports • Media acquisition • Detail Reports • Labels Reports • Chain of custody of media, log etc. All the evidence collecting process can be managed, including pictures, and external documents. The Database allows multiple queries 4 Copyright 2008 DFLabs Srl Italy

Slide 5: D.I.M. Stand-Alone Architecture Based upon Local Database Single user No special SW requirements All the information are registered into Database, including Pictures, Report, logs etc) Indicated for single Consultants/LE 5 Copyright 2008 DFLabs Srl Italy

Slide 6: Real Case Stand-Alone scenario 6 Copyright 2008 DFLabs Srl Italy

Slide 7: D.I.M. Workgroup/Enterprise Architecture It will allow more user profiling Each single user will be able to see/operate ONLY on his portion of allowed data Centralized Database Based Upon MySQL Synchronization module Supervisor Interface Indicated for workgroup (Opt. Supervisor module) up to enterprise 7 Copyright 2008 DFLabs Srl Italy

Slide 8: D.I.M. Workgroup/Enterprise Architecture 8 Copyright 2008 DFLabs Srl Italy

Slide 9: D.I.M. Interface Information About The Select Item Case Tree Statistics Information 9 Copyright 2008 DFLabs Srl Italy

Slide 10: Photographics evidences Original EXIFF Photo Record 10 Copyright 2008 DFLabs Srl Italy

Slide 11: General Report Items In Entrace General Chain Of Custody Timeline Deliverables 11 Copyright 2008 DFLabs Srl Italy

Slide 12: Detail Report Media Detail NetWork Dump Detail Host Detail Log Detail File/Folder Detail 12 Copyright 2008 DFLabs Srl Italy

Slide 13: Barcode Generation Barcode Available only with Host Chain Of Custody D.I.M. BarCode Module 13 Copyright 2008 DFLabs Srl Italy

Slide 14: BarCode Module 14 Copyright 2008 DFLabs Srl Italy

Slide 15: D.I.M. Acquisition Module 15 Copyright 2008 DFLabs Srl Italy

Slide 16: D.I.M. Lab Management 16 Copyright 2008 DFLabs Srl Italy

Slide 17: D.I.M. Supervisor Module 17 Copyright 2008 DFLabs Srl Italy

Slide 18: Contatti Internet: www.dflabs.com EMAIL: info@dflabs.com tel : +390373630145 18 Copyright 2008 DFLabs Srl Italy