Software / Remote collection
CompleteDiscovery
Collect supported devices remotely without asking every custodian to become a forensic examiner.
The product
What CompleteDiscovery does
Remote collection has to be understandable for the custodian and detailed enough for the examiner. CompleteDiscovery uses a guided collection utility so an authorized custodian can connect a supported device, follow device-specific instructions and allow the software to handle the collection and transfer workflow.
Collected data is delivered to a secure GDF cloud dashboard for authorized search, culling and export. The collection can be scoped as a fuller acquisition or targeted to supported data such as messages, chats and images. Activity is logged, and collected material is packaged with hashes and chain-of-custody detail.
Phones and tablets
Guided remote workflows for supported iPhone, iPad, Android phone and Android tablet collections.
Computers and servers
Remote collection from supported computers and server sources when the environment and authorization permit it.
Custodian guidance
Device-specific setup instructions reduce the number of technical decisions placed on the person holding the device.
Fuller or targeted scope
Configure the collection around the matter, including supported message, chat, image and related data types.
Secure cloud review
Send collected data to an authorized GDF dashboard for search, culling and export.
Collection record
Log collection activity and package acquired data with hash values and chain-of-custody documentation.
Methodology
Typical workflow
-
Prepare
Confirm authorization, supported devices, target data, collection depth and the custodian communication plan.
-
Guide
Provide the custodian with the collection utility and instructions for the device and computer being used.
-
Acquire
Run the configured collection and transfer the resulting data to the authorized secure workspace.
-
Review
Search, cull, export and reconcile the collected data with the activity and chain-of-custody record.
Operating note
Compatibility and limits
Collection depth varies by device model, operating system, encryption state, permissions and available acquisition method. The supported workflow and its limits are documented before the custodian begins.
Related software
Related GDF software
Talk with an examiner
Discuss the matter and the next step.
Call to discuss timing, scope and the safest way to share information. Do not send evidence or credentials by email.
24/7 hotline: 1-800-868-8189