How UK police became forensics experts
Through highly specialised cyber forensics training, cyber crime officers are now able to confidently keep a system alive while performing volatile data captures of random access memory (RAM) and network caches. This is all done at live crime scenes and within minutes of taking possession of a device.
Officers on the scene are also now able to triage and image folders or hard drives, giving them current and historical connections of both wired and wireless devices – valuable information that could speed the investigation.
Use of virtual private networks (VPN), torrent sites and file sharing activity may all be discovered by analysing a router, alongside the IP