DMI Team

All of the DMI unit are trained in advanced open-source techniques to use the internet, particularly social media, to locate people and evidence. This extends beyond standard apps to include the less well-known sites and messaging platforms, this offers investigators more options when trying to establish a subject’s digital footprint. The DMI unit can advise on how to obtain evidence from social media platforms, this includes legislation, current best practice and any authorities that may be required.

Social Media

The DMI unit can attend scenes to physically download data from WiFi routers which may assist in establishing what devices are present in an address and times and dates that a device has connected and disconnected from the networks which can give an indication of movements of the occupants.Router examinations can be time critical so ensure you ask for timely advice, do NOT seize a router, ensure it remains powered on at the scene and that the electricity supply at the address is not going to interrupted.

WiFi Router Examination

The DMI unit will advise on the value of a WiFi survey for your investigation and help to arrange one through the Cyber Crime team if applicable. A WiFi survey tells you exactly where a WiFi router is visible to a device, which will help to clarify results from CyComms applications and LIMA downloads and evidence whether someone could have been connected to the WiFi in a certain location at a relevant date/time.

WiFi Survey

The DMI unit’s primary function is the preparation of digital media investigation strategies to assist senior investigating officers (SIOs) and OICs in considering all potential digital lines of enquiry. Under new guidelines all Rape And Serious Sexual Offences (RASSO) investigations must have a DMI strategy and the team is already working closely with the Amethyst department to deliver on this.

Digital Media Investigation Strategies

The DMI unit can advise on and assist with the use of features such as Find My iPhone, Google Takeout and iCloud downloads to obtain more detailed location data when tracing the movements of a person involved in an investigation or in order to assist in locating high risk missing persons. Location data from a Google Takeout was recently used to great effect by the team in a high risk missing person case in Bangor On Dee in order to establish routes taken by the missing person which helped to identify traditional CCTV and house to house opportunities. The DMI unit can also advise on using more traditional methods of locating people such as ANPR and CyComms cell siting.

Locations

Working hours

The DMI unit’s core working hours are: Monday-Friday 0800-1600 Out of hours requests or urgent call outs can be made through the SIO

CyberDigiTools is available on work mobile devices now

CyberDigiTools version 2.0

We know that everyone can’t be an expert on everything, all the time. When faced with a complex crime scene in the middle of the night, wouldn’t it be good to know that you have an expert to offer the guidance you need, right at your fingertips? The CyberDigiTools app provides practical advice to help you recognise (and make the most of) any available cyber and digital evidence and intelligence. The app supports you to:    

• identify opportunities to help secure digital intelligence and investigation opportunities at the scene
• advise and support witness and victims of crime and appropriately safeguard them and any evidence
• be aware of emerging digital threats and opportunities

CyComms & LIMA

The DMI unit can advise on all aspects of CyComms and LIMA submissions including the proper packaging and seizure of digital devices.

Or reach out to individual members of the team: DS Mark Johnson PC Jody Kite DC Dan Pleass PC Rich Witham

Contact us

DMI Mailbox

DMI Tasking Request

The DMI can support the assessment of call data to determine whether or not a physical survey of phone coverage in a specific area will assist in your investigation. A physical survey (Radio Frequency Propagation Survey) can in certain cases prove or disprove whether it was possible for a mobile device to be in a location. This can be particularly useful in testing alibi evidence.RFPS data has been successfully used in a number of investigations to demonstrate the presence of suspect devices within a range of specific towers servicing scene locations, together with entry / egress routes. This tactic also provides investigators with an option to request data from specific cell towers at specific times to find details of any unknown devices that could have been present at the scene of an incident – a tactic referred to as a cell tower data dump.

RF Surveys

Coming soon...

Advice

The DMI unit can advise upon:

• Appropriate methods of preserving digital evidence at scenes to prevent loss of volatile data
• Seizure and packaging of digital devices
• All aspects of CyComms and LIMA submissions