US Defense Cyber Crime Institute (DCCI) Validates Internet Evidence Finder (IEF)

[Republished from the magnetforensics.com blog]

Magnet Forensics is pleased to announce that Internet Evidence Finder (IEF) v5.8 has been validated by the United States Defense Cyber Crime Institute (DCCI). DCCI is the research, development and evaluation arm that tests tools tailored to the specific requirements of digital forensic examiners and cyber intrusion analysts. DCCI is a part of the Department of Defense Cyber Crime Center (DC3).

Our law enforcement customers are always interested in 3rd party reviews and examples of how IEF can be used in their digital investigations. The validation from DCCI falls on the heels of a positive review of IEF on Forensic Focus, as well as a favorable evaluation report from the National Institute of Justice’s Electronic Crime Technology Center of Excellence.

Having IEF validated by the US DCCI is another big vote of confidence for our team. We hold ourselves to an incredibly high standard, and pride ourselves on developing quality products that deliver accurate results. It’s great to have external validation that we are on the right track.

The DCCI report evaluated IEF on 26 different criteria to determine the circumstances under which computer crime investigating agents assigned to the Defense Criminal Investigative Organizations (DCIOs) may employ IEF for digital forensic investigations and analysis.

Findings included:


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


– IEF is forensically sound and does not modify evidence files upon reading them

– IEF successfully produces the same results after being run against the same dataset multiple times

– IEF successfully recovered data from a number of Internet related artifacts including: Hotmail, SkyDrive, Skype, Yahoo, AOL, Facebook, Gmail, Google Documents, Limewire, Dropbox, Twitter and more

– Examiners have the ability to search a dataset created from a RAM capture using IEF

Unfortunately, we aren’t perfect, and there were three artifacts that DCCI identified in their report as not satisfying their criteria. With the generous help of the staff at DCCI, we were able to fix one of them right away, and it will be available in v6 later this month. The other two artifacts are new updates/new versions of the supported artifacts, and will go into a point release (6.x) in early Q2 of this year.

The DCCI report is available to U.S. federal, state, and local law enforcement agencies, and law enforcement officials from Australia, Canada, England, & New Zealand. To download the report users can go to https://dfilink.net.

Our thanks go out to the DCCI and DC3 folks for selecting IEF to go through this rigorous validation process.

For a free 14-day trial of IEF, please complete the form here.

Leave a Comment