Department of Defense Cyber Crime Center


The Department of Defense Cyber Crime Center is designated as a Federal Cyber Center by National Security Presidential Directive 54/Homeland Security Presidential Directive 23, as a Department of Defense center of excellence for Digital and Multimedia forensics by DoD Directive 5505.13E, and serves as the operational focal point for the Defense Industrial Base Cybersecurity and Information Assurance Program. DC3 operates under the Air Force Office of Special Investigations.

Mission

Deliver superior D/MM forensic services, cyber technical training, vulnerability sharing, technical solutions development, and cyber analysis for the following DoD mission areas: cybersecurity and critical infrastructure protection, law enforcement and counterintelligence, document and media exploitation, and counterterrorism.

Digital & Multimedia Forensics

The DC3 Cyber Forensics Laboratory performs D/MM forensic examinations, device repair, data extraction, and expert testimony for DoD. The lab's robust intrusion and malware analysis capability supports other DC3 lines of business and activities. Lab operations are accredited under ISO 17025 by the American Society of Crime Laboratory Directors/Laboratory Accreditation Board which guides reliable, repeatable, and valid exam results, subjected to quality control and peer review.

Cyber Training

The DC3 Cyber Training Academy, formerly DCITA, provides in-residence and online training to DoD elements that protect DoD information systems from unauthorized use, criminal, fraudulent, and foreign intelligence activities. The Academy's curriculum offers courses organized into specialty areas. Since its founding in 1998, the Academy has recorded more than 35,000 student enrollments in its courses.

Technical Solutions

The DC3 Technical Solutions Development Directorate tailors software and system solutions engineered to the specific requirements of digital forensic examiners and cyber intrusion analysts. TSD validates commercial off-the-shelf, government off-the-shelf, and in-house developed software/hardware before it can be used in a forensic process. In addition, TSD functions as the DoD repository for cyber counterintelligence tools.

DIB Cybersecurity

As the operational hub for the DIB CS/IA Program, the DIB Collaborative Information Sharing Environment assists DIB companies to safeguard DoD content and intellectual property residing on or transiting their unclassified networks. DCISE develops and shares actionable threat products, and performs cyber analysis, diagnostics, and remediation consults for DIB Partners.

Analytical Group

The DC3 Analytical Group supports LE/CI agencies, including the Air Force Office of Special Investigations, the Naval Criminal Investigative Services, and key mission partners such as the Federal Bureau of Investigation. As a member agency of the National Cyber Investigative Joint Task Force, the AG leads a collaborative analytical and technical exchange with subject matter experts from LE/CI, computer network defense, Intelligence Community, and information assurance agencies to build a threat picture enabling proactive LE/CI cyber operations focuses on nation-state threat actors.

Vulnerability Disclosure

The DoD Vulnerability Disclosure Program leverages the experience and knowledge of ethical hackers from around the world to improve network defenses and enhance mission assurance. DC3 was assigned by the Secretary of Defense to be the DoD focal point for receiving vulnerability reports and interacting with researchers consistent with DC3's existing information sharing responsibilities as a Federal Cybersecurity Center.