Hello,
I am in the process of setting up a home computer forensics workshop/business. I have always worked for a company providing those services and for the most part it was never a question about the workspace in which I was conducting exam.
Now that I am going off on my own I know that I will need safeguards for a home lab/office to ensure my customers that their data is safe.
Does anyone know or has anyone setup a home forensic lab that has been able to meet customers standards?
Anything I should know about?
Thanks,
The requirements for a home or small office are the same as for a large business and will depend on the type of work you are going to be instructed and the risks involved in the work and premises. As a first basic step you may look at the requirements you need to meet for your customer/police and other risks that may be present due to the environment - such as a family member/burglar gaining access to your office, a flood/fire…..
In terms of generic physical security then the first step is looking at the security of the premises you are in. If you have opted for a small office in a business park then you are going to have less control over the physical security and the ability to install your own so you'd probably need to look for somewhere implementing adequate security for your own needs. In terms of a standalone premises or your own home office then you are going to need to firstly address the basic physical security (doors, windows, controlled access to rooms and the premises as a whole). Then you will probably need to look at purchasing an adequate safe (to store exhibits etc.) and an appropriate alarm with some form of monitoring (in the UK, suitable alarms can be placed on Police Response). You may also need to look at fire/security cabinets as well.
In terms of your computer lab set up, the arrangement is going to be similar just on a smaller scale to what a larger company would require. You're also going to need to develop similar procedures for dealing with your evidence to ensure its safe storage, examination, transport etc. and that there is a controlled continuity.
Kind regards
Sam Raincock
Thanks great info.
You maybe visited or inspected by clients, and attorneys more often in your lab than you think . . . make preparations for that.
I second Sam's post on security and CoC, and also suggest that you want to consider power usage. Make sure you're running all your critical stuff on UPS and make sure that your wiring/breakers are happy to handle a couple of thousand watts from your equipment. I'm running 3 UPS to cover my equipment.
Great, thanks for all the information. Has anyone seen something like a recommended checklist?
Great, thanks for all the information. Has anyone seen something like a recommended checklist?
Have you considered the book 'Building a Digital Forensic Laboratory'? I can't vouch for it's correctness, but it does present a number of points you may need to think about.
Do not forget about a good and large pot to make tea (or coffee machine if that is your poison).
A dedicated refrigerator with freezer, to chill drives and your snacks.
A cot, or a pull out couch is definitely a plus.
Honestly, we can think of all kinds of hardware and software that are oh so important for our work. WE never forget about the next gadget to get.
What I have seen forgotten more is the creature comforts and human element to this work.
Just my two staters.
Speaking for creature comforts, all that computing equipment is going to put out a whole lot of heat, and generally a home with central heat/cooling isn't going to keep your office cool without freezing the rest of the house. You'll need to scope out cooling specifically for your office, and figure out how to incorporate it without wrecking any security for your window (i.e. one of those units where you put an outpipe in your window and push it down isn't going to cut it unless you've also got bars.
Hello,
I am in the process of setting up a home computer forensics workshop/business. I have always worked for a company providing those services and for the most part it was never a question about the workspace in which I was conducting exam.
I'll be frank - just copy what was done at your workplace.
Oh and get a lawyer/insurance.