CASE: New Mobile Forensic System Lets Correction Officials Blow Away The Backlog

Blowing away the backlog: New mobile forensic system lets correction officials cut mobile phone processing backlog, gain fast access to critical gang intelligence.Key achievement

The Tennessee Department of Correction had a mobile phone problem. Until April 2017, they relied on one employee to extract data from seized contraband phones from 10 correctional facilities spread across the state. Backlogs were high, processing slow, investigations impeded. But that all changed in early 2017, with the rollout of a new mobile forensic system from MSAB, using eight specialized extraction Kiosks and five PC-based XRY Office software applications. Twelve investigators have been trained to handle all extractions and analysis of phones in the field without having to use a centralized analyst. Now, there are no backlogs and the number of phones analyzed has soared 584% year over year.

Our new mobile forensic system helps us to fulfill our mission daily… By extracting and analyzing more devices, the TDOC Office of Investigation & Compliance can reduce violence and contraband introduction statewide in a more timely fashion.

– KOREY COOPER, DIRECTOR, OFFICE OF INVESTIGATIONS & COMPLIANCE, TENNESSEE DOC

The problem/challenge

Like most state prison systems, Tennessee has been fighting a battle to control the flow of contraband phones into inmates’ hands and manage the large number of hardened gang members within their population. When phones were confiscated, they were sent to Nashville for processing. In some months as many as five boxes of phones would arrive, containing hundreds of phones each. In urgent, high-profile cases, phones would be driven to the Nashville office – and Tennessee is 482 miles long – consuming many hours of employee time and resources.

The phone processing backlog had the heaviest impact on the Department’s investigators, who are responsible for investigations within the system, with a focus on preventing outbreaks of violence by gang members, preventing gang members from communicating with other criminals outside the prison system and identifying corrupt staff members. Phones contained critical intelligence that was needed quickly. The processing backlog was a major issue impeding their work.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

The work and initial results

In early 2017, the Tennessee DOC began working with MSAB to implement a better system. The DOC staff worked with MSAB’s Professional Services team to define the challenges to be solved, the goals to be achieved and other requirements. Eight easy-to-use Kiosks were installed, one in each state-owned prison (with the exception of two Nashville units which are within a mile of each other), plus five XRY Office applications on standard PCs. The Kiosks are computers with “wizard-like workflows” that make it easy to extract phone data by following simple steps. Every investigator received one day of training, enabling them to manage the extractions successfully in almost every case. Speed improved dramatically vs. the previous technology used. The number of phones processed increased by 584% year to date in 2017 vs. the same period in 2016. Reports on phones processed, gang intelligence gained, phones seized from inmates, staff and visitors are output in real time.

Now, investigators are getting updated intelligence and evidence with no delays. This is paying off in a number of ways, such as enabling the identification of high-ranking gang members, helping prison officials isolate and/ or house them safely. Through the timely analysis of phone data, investigators are also able to look for evidence of potential attacks on staff members. And based on this success, the state Pardons & Paroles employees have begun using MSAB technology as well.

“Our department’s mission is ‘to operate safe and secure prisons and provide effective community supervision in order to enhance public safety,’” said Korey Cooper, Director, Office of Investigations and Compliance at the Department. “Our new mobile forensic system helps us to fulfil our mission daily. Contraband cellular phones can have a wealth of information stored in their memory. By extracting and analyzing more devices, the TDOC Office of Investigation & Compliance can reduce violence and contraband introduction statewide in a more timely fashion.”

“Technology and Applications (Apps) improve daily. TDOC can rest assured that the new tools in our intelligence toolbox will help us stay current on today’s technological progressions. Additionally, this new system allows the department to collaborate more with our partner law enforcement agencies to share intelligence gathered.”

Tennessee is still a long state, but there are no longer long waiting times for mobile phone processing in the Tennessee DOC.

To download the article, click here.

Leave a Comment

Latest Videos

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools. 

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools.

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_7QiFTiuY7Vw

AI In CSAM Investigations And The Role Of Digital Evidence In Criminal Cases

Forensic Focus 22nd March 2023 11:44 am

Throughout the past few years, the way employees communicate with each other has changed forever.<br /><br />69% of employees note that the number of business applications they use at work has increased during the pandemic.<br /><br />Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.<br /><br />Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.<br /><br />Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.<br /><br />With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.<br /><br />Join Monica Harris, Product Business Manager, as she showcases how investigators can:<br /><br />- Manage multiple cloud collections through a web interface<br />- Cull data prior to collection to save time and money by gaining these valuable insights of the data available<br />- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box<br />- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee<br />- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 11:00 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...