The internet provides an unprecedented sense of anonymity and invulnerability to criminals -- to plan terrorism, commit fraud, pirate software, perform corporate espionage, distribute controlled substances, traffic in child pornography, and more. As a result, Law Enforcement has the need to look beyond conventional computer, or host-based forensics, and address new targets of evidence on networks, and exploit those sources.

Telecommunication providers have begun to comply with CALEA beyond its original charter for voice intercepts, now involving Internet data. By the nature of Internet traffic, Law Enforcement is dealing with massive data volumes and sophisticated Internet-based targets forcing agencies to look at new technologies and enhance personnel skills in order to address their operational needs. Yet there continues to be a significant void in the ability to analyze the various flavors and sheer volume of the intercept data these agencies collect. Data capture is easy; it is the analysis, minimization, and evidence presentation that is the true challenge.

Law enforcement organizations historically have used NetWitness software products successfully in numerous high-profile and newsworthy investigations around the world. The technology was designed from the ground-up, through many years of collaboration with the Federal Government, to foster collaboration and support complex data collection, processing and analysis challenges.

NetWitness Investigator Enterprise is the core investigative product of the NetWitness NextGen™ suite. It is a self-contained, fully functioning application that is easy-to-use and is portable for field operators. NetWitness provides total investigative insight into network activity by forensically collecting and presenting all network traffic and making no assumptions about the skills of the end-user or what they would like to see. NetWitness products process network traffic based on common standards, enabling a consistent and forensically accurate representation of network activity. This approach enables novice and advanced users to get the complete context needed to investigate crime and decrease time to closure.

NetWitness has proven benchmarks in performance and functionality for Law Enforcement:

• In operational situations, NetWitness can process network traffic 150x faster than Government solutions.
• NetWitness easily scales for cases with multi-terabytes of collected traffic, by eliminating database bottlenecks and optimizing operating system performance.
• It forensically maintains and displays every single session as it happened, giving total context to every event, no matter the sophistication of the target(s).
• It provides an open programming interface features that enable easy integration into existing investigative methods and procedures.
• NetWitness’ patented data model provides insight and context into network traffic unavailable in any other product.

Also, when optionally combined with NetWitness Decoders, Concentrators and our automated reporting and alerting software Informer, law enforcement staff can acquire the total knowledge needed to deal effectively with Internet crime from sophisticated and novice suspects.