NCSA CyberSecurity
Cyberinvestigation Law Enforcement Wizard (CLEW)
A product of the Live Computer System Capture and Triage Tool (CCTT) project.
"I definitely see the need for this (tool) in my line of work. The live capture alone is helpful, but the CCTT [CLEW] wizard really helps my guys to target the specific kind of information I need, like email headers or instant messaging conversation logs. It's simple to use, and that's a good thing. We were excited to try it out, and you guys didn't disappoint!"
- Shaun Cook, Investigator, City of Urbana Police Department
It's an all-too-common situation: a law enforcement officer receives a complaint from a victim of Internet fraud or harassment, and while the officer does his best to capture the details, valuable information on the victim's computer goes uncaptured and never gets to those with the expertise to decipher it. When faced with this scenario, many law enforcement first responders (LEFRs) are left scratching their heads, unable to do anything but take down the most basic information.
CLEW is a force multiplier that gives every officer the ability to respond to computer-based crimes. With CLEW, officers can
- Quickly and easily gather evidence,
- Guide the LEFR on procedure, and
- Ensure the preservation of the collected evidence for further investigation.
NCSA is developing CLEW in collaboration with federal, state, and local law enforcement professionals from Illinois and Missouri.
More Information
The CLEW application can be easily
downloaded to and uploaded from a typical USB thumb drive.
- Watch a movie that demonstrates the CLEW program. (5 min 32 sec)
- Here's a longer, more comprehensive movie with an overview and demonstration of the CLEW and CLEW Investigator programs. (10 min 39 sec)
- Download our CLEW flyer.
- Read the transcript of Von Welch and Randy Butler's August 19, 2008 interview with the University of Illinois:
- Listen to a podcast of Welch and Butler's August 25, 2008
conversation with Champaign radio host Patrick Pfingsten on WDWS:
Contacts
For more information about CLEW, contact Randal Butler, CCTT Project Director and Co-Director, NCSA Cybersecurity Directorate.
Email: rbutler@ncsa.uiuc.edu Phone: (217)244-8285
Partners and Collaborators
The Live Computer System Capture and Triage Tool is a collaboration between NCSA and the Federal Bureau of Investigation, Springfield, IL Division. The CCTT project team at NCSA received critical input and advice on CCTT's design from members of several local law enforcement agencies, including the FBI Springfield, IL Division; the Champaign County, IL Sheriff's Office; the Illinois State Police; the City of St. Louis, MO Metropolitan Police Department; the University of Illinois Police Department; and the City of Urbana, IL Police Department.
Acknowledgments
The CCTT project is funded by a grant from the National Institute of Justice.