Introduction
DOMEX Provides
Equipment
Analysis
Digital Evidence Laboratory
Key NDIC Tool--Raid
Cost to Client Agency
How to Obtain DOMEX Support
Brochure PDF (801 KB)
Document and Media Exploitation Customer Guide pdf (1,674 KB)
Sample DOMEX Request Letter
The National Drug Intelligence Center (NDIC) Document and Media Exploitation (DOMEX) Branch has developed a uniquely efficient approach that allows its DOMEX analysts to quickly prioritize, organize, and analyze significant amounts of seized documentary and electronic evidence.
NDIC's DOMEX methodology integrates input from the requesting agencies' case agents, prosecutors, and analysts into the DOMEX mission planning process, thereby ensuring that the DOMEX mission will be focused to meet the needs and priorities of the requesting agencies. In conjunction with the input from the requestors, our experienced DOMEX analysts establish the Priority Intelligence Requirements (PIRs) for each DOMEX mission, thereby limiting the scope of the mission to the most important elements particular to the requestor's investigation.
NDIC's DOMEX analysts are able to quickly identify assets, the key associations and other investigative leads from their analysis of the evidence. As a result, investigators, prosecutors, and analysts can more rapidly determine the scope of their evidentiary holdings, identify previously unknown relationships and assets, and better prepare for court proceedings. All DOMEX personnel are trained in proper evidence-handling techniques to ensure that our services are conducted with the utmost professionalism.
Timely Intelligence Support Reports (ISRs) containing actionable findings, methodologies, associates, or other investigative leads, including:
- Financial information and asset identification
- Biographical data and criminal methodologies
- Relevant organizationconnections and associations
- A detailed inventory of suspect findings
- Computer-assisted analyses such as link analysis, matrix
analysis, time line analysis using i2 Analyst's Notebook, and
geospatial analysis using ArcView Geographic Information Systems
- Real-time results: all documents typically analyzed in a 2-week period
NDIC conducts the majority of its DOMEX missions at NDIC headquarters in Johnstown, Pennsylvania. NDIC has also partnered with the Utah National Guard in the establishment of an NDIC DOMEX team in Salt Lake City, Utah. This DOMEX team works primarily on the DOMEX missions that include any foreign language materials (i.e., Spanish). There are five other DOMEX teams located at the following OCDETF Strike Forces locations: Atlanta, Georgia; El Paso, Texas; Houston, Texas; Phoenix, Arizona; and San Diego, California. They directly support the OCDETF investigations in those OCDETF regions. DOMEX may also travel and work onsite when deemed necessary.
DOMEX provides new leads immediately as they are identified throughout the DOMEX mission, along with providing a comprehensive and fully sourced Intelligence Support Report (ISR), which is provided at the end of the mission, in both hard and soft copy. The ISR contains all actionable findings, including previously unknown links, financial information, and asset identification. DOMEX also provides an out-brief of the significant findings at the conclusion of the mission. DOMEX analysts are trained to identify assets for seizure and contribute significantly to forfeiture efforts.
After each mission, DOMEX may provide further analytical services such as charts, time lines, and geographical mapping products, if needed, subsequent to the mission for court proceedings. Additional interim reports or briefings containing time-sensitive or perishable information may also be provided as needed. DOMEX provides all completed analyses directly to the client agency to ensure compliance with dissemination policies and existing agreements. The requesting agency alone determines the degree of dissemination.
DOMEX provides its support to investigations targeting drug trafficking, money laundering, counterterrorism, and any other investigations that impact U.S. national security. DOMEX can support classified, sensitive, and foreign language investigations.
As criminal organizations increasingly use computers and other data storage devices to further their illegal activities, there is a strong probability that electronic media will be part of the seizure, and it can also be sent to NDIC for analysis. Electronic media include, but are not limited to, computer hard disk drives, removable media, mobile phones, smart phones, personal digital assistants, and gaming systems.
NDIC's Digital Evidence Laboratory (DEL) includes information technology specialists who conduct electronic media exploitation using state-of the-art equipment and technology. They perform the examinations of electronic media onsite or at NDIC. The results of the media exploitation from each request are then incorporated with any documentary evidence from that requestor for a total combined analysis within an overall single DOMEX mission. This ensures a more comprehensive and efficient analytical product.
NDIC created
Real-time Analytical Intelligence
Database (RAID) to manage large quantities of data gathered during
DOMEX missions. RAID is a relational database used to record key pieces of information and to quickly identify links among people, places, businesses, financial accounts, telephone numbers, and other investigative information examined by our analysts.
The software runs on any Windows operating system (Windows 2000 or higher), in any mode of operation (stand-alone or LAN).
RAID can be used as an analytical tool for information obtained from any kind of investigation. It can also be utilized for case management. NDIC has enhanced RAID to meet the expanding support requirements of the intelligence and law enforcement communities. RAID also facilitates NDIC’s capability to conduct cross-case analysis.
Key upgrade features include increased data storage, scalability (small database to very large, supporting a few users to hundreds), more comprehensive and efficient analytical tools, enhanced multimedia capability, an import/export wizard, dynamic additional data fields (configurable by users), data access security, easier combination/separation of cases, and the ability to apply data mining technologies across data sets.
RAID is currently available free of charge, and thousands of copies of this application have already been distributed to appropriate law enforcement and intelligence agencies worldwide.
See our RAID page for further information.
NDIC's DOMEX Branch provides its service at no cost to the client agency. In most instances NDIC requests that a case agent or prosecutor travel to NDIC at the client agency's expense to provide background on the case and address analysts' questions during the DOMEX mission.
If the client agency requests onsite support from DOMEX staff, the client is responsible for all travel-related costs. Additionally, if NDIC personnel are required to testify as a result of their support to an investigation, those NDIC travel-related costs will be borne by the client agency.
DOMEX support is available to federal agencies or multiagency law enforcement task forces and is determined on a priority basis. Any agency wishing to obtain support should submit a formal request to the Chief of the NDIC DOMEX Branch. The request should be made via the client agency’s established protocol and should include:
- the investigation summary
- the priority of the investigation within the requestor’s division,
- and an estimate of the nature and volume of the seized material to be analyzed by DOMEX.
Optimally, all requests should be submitted to NDIC in advance of the projected seizure to ensure adequate case and logistical preparation. In most instances a telephonic assessment of the investigation and seized material will be conducted. For complex investigations or large quantities of seized material, it may be necessary for a DOMEX advance team to conduct an assessment at the requesting field office. A final determination of DOMEX support will be made after the assessment is completed.
Please send all requests for DOMEX support as well as copies of RAID to:
Document and Media Exploitation Branch
National Drug Intelligence Center
319 Washington Street, 5th Floor
Johnstown, PA 15901-1622
Telephone: (814) 532-4601
Fax: (814) 532-5854
E-mail:
ndic.domex.request@usdoj.gov
