Page 31 - Master Training Catalog 01222021 stc

P a g e | 31

Computer Forensics Unit (CFU)

As the use of computers and digital devices has become widespread, CFU
has grown to address the investigative challenges of a digital world. These
devices have greatly increased the volume of data that HSI special agents
must examine during the course of an investigation. In addition, HSI
investigators now must manage digital evidence that is highly volatile, mobile
and subject to encryption by any user. This makes recovery and stewardship
of evidence challenging.

Computer forensics agents/analysts (CFAs) are HSI investigators or analysts
trained to perform forensic examinations of seized digital storage devices,
such as computer hard drives, flash drives, PDAs, mobile phones, DVDs,
CDs and tape media. They use all available digital evidence recovery
techniques to preserve an item's authenticity and integrity while maintaining a
strict chain of custody.

CFAs are in HSI field offices throughout the world to provide expertise on
investigative strategies and to assist case agents in preparing search
warrants targeting digital evidence. They are also called upon to furnish
expert computer forensic testimony in criminal trials and to provide support to
state and local law enforcement.

CFU manages the Computer Forensics Laboratory and provides
programmatic oversight, equipment, technical support, training, and guidance
for the ICE Computer Forensics Program (CFP). CFU provides field offices
with a reach back capability for subject matter expertise regarding new
technologies and emerging threats. Additionally, CFU provides the field with
a surge capacity for data processing on critical and complex investigations.
CFU promotes continuing education, such as professional and industry-
standard certification initiatives to ensure computer forensics agents and
analysts in the field are trained and certified in the most current computer
forensics techniques.

The CFU at HSI Headquarters manages the following programs that
assist with the investigation of child exploitation:

• The Human Exploitation Rescue Operative (HERO) Child Rescue Corp
program: This program is designed to give ill, injured, or wounded members
of our Armed Forces an opportunity to join the HSI mission to combat child
exploitation. Under this one-year paid internship, participants receive three