Newbie Fresh Out of College Looking for Advice
I am looking at taking over as a computer/cellphone/tablet/etc investigator for my mother’s business who has retired. I’m wanting to upgrade her forensic tools, which is FTK, Lantern, and an old version of Cellebrite. Primarily our company works on civil and corporate cases. She retired a few years back and advised everything needs to be updated because a lot has changed since then and recommended I reach out to everyone on this forum. I would like to have one platform that does phones, computers, tablets, etc if possible. If there isn’t one platform that does it all, what’s a good combo that won’t break the bank. Thanks in advance for any feedback.
Unfortunately, you are looking for one tool to rule them all. I hate to break it to you, but there is no such things. Also, there is a cost. If you are going to work as a forensic consultant, especially being a "small shop," I would recommend using tools that are used widely in the industry. I have worked in law enforcement and in the private sector. I also have colleagues who work in both government and private digital forensic firms. Most places use these common tools:
Extero (AccessData) FTK, OpenText (Guidance) EnCase, Magnet Forensics AXIOM, Cellebrite UFED4PC and Physical Analyzer, XRY, and Belkasoft. You will also need write-blockers for imaging, and it would not hurt to have a standalone imager.
I am sure there will be others who can add to this list. You need to remember, you will need training. Also, earning certifications for the software you are using will help in court. (FYI, I am not a trainer nor do I work for any forensic software company.) You are looking at a big investment in time and money. It will pay off in the long run, but if you really want to be in this field, you will need to not only receive initial training, but also be a lifetime learner.
Honestly, if you don't know what kind of tools you need than you probably aren't even qualified to take over the business. I would recommend some more training first.