Digital Evidence Examination Request

GLOUCESTER COUNTY PROSECUTOR'S OFFICE HIGH TECH CRIMES UNIT DIGITAL EVIDENCE EXAMINATION REQUEST

WARNING: DO NOT enter any Classified Information in to this form! If you have any questions, please call the GCPO HTCU at (856) 384-5500. When delivering evidence to the lab, please include a USB/hard drive equal to the size of the device being examined. For example, a 256GB USB drive for a 256GB cell phone. This drive WILL BE ERASED for the examination to be copied, so be mindful of the media provided.
Type of Assistance Requested *
Preserving Mobile Devices

Once locked, or turned off, a device may become inaccessible - keep powered on if possible. If the device is off, do not power it on. If unsure or uncomfortable handling a mobile device, contact GCPO digital forensic personnel for assistance at (856) 384-5500. A Faraday Bag or foil is not foolproof and plugging a charging cable into a power source outside the Faraday Bag acts as an antenna unless the Faraday Bag is equipped with a shielded power/USB line. Seek legal assistance to place the device in airplane mode or to collect identifiers on the device.
Requesting Officer First Name
Requesting Officer Last Name *
Requesting Officer Email Address *
Requesting Officer Contact Telephone *
Use format (XXX) XXX-XXXX
Agency *
Agency Case Number *
Date of Request *

Month Day Year
Date
Suspect *
If multiple, enter PRIMARY suspect
Victim *
If multiple, enter PRIMARY victim
Crime/Offense/Violation *
If evidence is submitted, include make, model, serial number, additional identifiers - press enter to add multiple items.
Be as descriptive as possible and include any damage on the device!
Year, Make and Model of Vehicle
Process Warrant Returns - Cloud Provider
View https://www.magnetforensics.com/blog/warrant-return-analysis-in-magnet-axiom/ for more information.
DVR System Time Frame Requested Start

Month Day Year
Date
Hour Minutes
DVR System Time Frame Requested End

Month Day Year
Date
Hour Minutes
DVR Offset
Use https://ewrjontan.github.io/dvroffsetcalculator/ to assist you with this. List the offset displayed.
Camera Number(s) Requested (select all that apply)

Camera 1 Camera 2 Camera 3 Camera 4 Camera 5 Camera 6 Camera 7 Camera 8 Camera 9 Camera 10 Other
Tips for DVR Examinations

When in doubt, request HTCU to respond (856-384-5500) or contact the on-call MCU detective after hours.

List the admin login credentials for the device (if known) in the additional notes section.

When at a search scene concerning video surveillance equipment the following procedures should be followed for a successful seizure of video footage:

If possible, take the entire DVR system (just the DVR and power cable, not the cameras) if requesting HTCU to examine the device.

Video can be exported from the surveillance system prior to requesting assistance from HTCU. You only need to know the date, time, and camera of which the video footage is contained pertaining to your investigation. You can review the footage utilizing the DVR system's menu options prior to exporting. Typically, the menu on the DVR will allow for the exportation of a selected time period of footage to USB or CD.

On most DVR systems, there is a menu button on the front of the system (similar to a VHS recorder). The following steps should be followed during the exportation process:
- Review the menu options on the DVR system. It should indicate how and where you can export the video. Typically it is either to CD or USB device.
- Export the video footage in its raw proprietary format. This format will typically not play on a Windows computer. Exporting in the proprietary format allows the video to be copied with no compression. With no compression, a video enhancement has a better chance of success.
- Export the proprietary player from the DVR system. This will allow for viewing the raw video files on a Windows computer.
- Export the video footage in a Windows format (i.e. avi, mpg, mov). This format will have some compression limiting the enhancement capabilities but will allow you to view the video on a Windows computer.
Court Order Deadline, if Applicable

Month Day Year
Date
PIN/Login :
List any known pins or logins. For pattern unlocks, print this form, draw the pattern unlock to include starting and ending points, and the direction of the swipes. Attach this form to the bottom of this page before submitting.
Details of Request
Provide detailed information pertaining to what is needed and authorized by legal authority
Was evidence previously accessed by anyone?

Yes No
If Yes, explain
Legal Order *
The Gloucester County Prosecutor's Office requires all cases to be provided with written documentation of legal authority to conduct the search/examination of the media submitted. The GCPO HTCU reserves the right to refuse examination of any media for any reason or may request additional documentation.
* Evidence WILL NOT be seized or examined without a copy of the legal order, written consent, or documentation from a legal authority.
Legal Authority File Upload #1

Failure to include this documentation will more than likely cause a delay in processing the request.
Cancel of
Legal Authority File Upload #2

Failure to include this documentation will more than likely cause a delay in processing the request.
Cancel of
Legal Authority File Upload #3

Failure to include this documentation will more than likely cause a delay in processing the request.
Cancel of
For HTU Use Only
Date Received

Month Day Year
Date
Assigned Investigator
GCPO Case Number
Date Completed

Month Day Year
Date
Examination Successful?
Results given to
Date Returned

Month Day Year
Date
Notes/Comments
Should be Empty:

Now create your own Jotform - It's free! Create your own Jotform

GLOUCESTER COUNTY PROSECUTOR'S OFFICE HIGH TECH CRIMES UNIT DIGITAL EVIDENCE EXAMINATION REQUEST

Preserving Mobile Devices

PIN/Login :

For HTU Use Only