A New Live Triage Tool Taking Shape, Part 1
The Carnivore Digital Forensic System... doesn't actually exist... yet. Rather, the vision I have in my head that represents what the platform is supposed to be hasn't yet become reality. What has become reality is the first step toward that goal... CarnivoreLE. What is now CarnivoreLE started a few years ago as a way to address live and volatile data on a suspect machine without losing it when the power was eventually pulled away. To better explain why this was of interest to me, I'll take you back to 2001. In 2001, I was assigned as a task force officer to one of the FBI's field division offices participating in their Innocent Images National Initiative - an investigative task force focused on Internet crimes against children and technology-facilitated child exploitation. We were trained in the common practice of pulling the plug on suspect computers that were found running during a search and transporting those computers to an FBI digital forensic lab for analysi