LoL. In 2013 the Nt'l Comm'n on Forensic Science was created as an Advisory Cmte. to collaborate with the NIST. In it's 2017 final publication, the Comm'n acknowledged it failed to address digital forensics. So most of the guidance comes from a hodge-podge of commercial and educational sources; e.g. EDRM, Sedona Conf., AAFS, and ACEDS.
e-Data Standards?
It could be internal dedup. in MS Compliance or a hidden journaling rule. What most IT "experts" see in the front-end Admin. tools is just the tip the iceberg. If the collections weren’t done using PowerShell checks, it could be incomplete.
Cloud export <> initial content search?
The agency probably uses server-side encryption. Internally, the files run fine. Externally, garbage. Especially if the agency said to play the files directly from their thumb drive. You'll need to get the judge to understand so you can get an appropriate order. And please, do this before you ingest the encrypted files into a review platform. Also, you'll really need help getting those files to your client if they are in jail.
Videos from LEO not playing?
The fog is related to the internet-of-things (IOT). It conceptualizes where raw data is processed – and where discovery requests need to be directed. If a device (e.g. temp. sensor) sends raw data (e.g. temp.) back to the manufacturer for processing, then the data relevant to a lawsuit is in the cloud. Instead, if the device sends data to an in-house hub, then the data relevant to a lawsuit is closer to the source … closer to the ground … it’s in the fog. A cloud, close to the ground.
What is the fog?
If I take a picture of the Spanish version of the Gettysburg Address and send it to you, you have all the information needed to know what the Gettysburg Address says. But it takes work, it’s not the form Lincoln used, and some things could be lost in translation. To resolve those issues, I could give you the Address in its native English. But if you wanted to figure out if Lincoln physically wrote the Hay copy, then you need more. You need to look at the weight of the pen on the paper, what kind of ink from what kind of pen, etc. You need a forensic image of the original data. Oh, and the “created date” is just the date the file was created on your computer. You probably downloaded it from a cloud-storage link from OC (or your client?).
Natives "created date" is today?
That's why you need to hire us; the earlier the better.
You didn't know?
