Analyst Notebook Cost

[Bok Wykes]

TheNational Drug Intelligence Center (NDIC) Document and Media Exploitation (DOMEX) Branch has developed a uniquely efficient approach that allows its DOMEX analysts to quickly prioritize, organize, and analyze significant amounts of seized documentary and electronic evidence.

NDIC's DOMEX methodology integrates input from the requesting agencies' case agents, prosecutors, and analysts into the DOMEX mission planning process, thereby ensuring that the DOMEX mission will be focused to meet the needs and priorities of the requesting agencies. In conjunction with the input from the requestors, our experienced DOMEX analysts establish the Priority Intelligence Requirements (PIRs) for each DOMEX mission, thereby limiting the scope of the mission to the most important elements particular to the requestor's investigation.

NDIC's DOMEX analysts are able to quickly identify assets, the key associations and other investigative leads from their analysis of the evidence. As a result, investigators, prosecutors, and analysts can more rapidly determine the scope of their evidentiary holdings, identify previously unknown relationships and assets, and better prepare for court proceedings. All DOMEX personnel are trained in proper evidence-handling techniques to ensure that our services are conducted with the utmost professionalism.

NDIC conducts the majority of its DOMEX missions at NDIC headquarters in Johnstown, Pennsylvania. NDIC has also partnered with the Utah National Guard in the establishment of an NDIC DOMEX team in Salt Lake City, Utah. This DOMEX team works primarily on the DOMEX missions that include any foreign language materials (i.e., Spanish). There are five other DOMEX teams located at the following OCDETF Strike Forces locations: Atlanta, Georgia; El Paso, Texas; Houston, Texas; Phoenix, Arizona; and San Diego, California. They directly support the OCDETF investigations in those OCDETF regions. DOMEX may also travel and work onsite when deemed necessary.

DOMEX provides new leads immediately as they are identified throughout the DOMEX mission, along with providing a comprehensive and fully sourced Intelligence Support Report (ISR), which is provided at the end of the mission, in both hard and soft copy. The ISR contains all actionable findings, including previously unknown links, financial information, and asset identification. DOMEX also provides an out-brief of the significant findings at the conclusion of the mission. DOMEX analysts are trained to identify assets for seizure and contribute significantly to forfeiture efforts.

After each mission, DOMEX may provide further analytical services such as charts, time lines, and geographical mapping products, if needed, subsequent to the mission for court proceedings. Additional interim reports or briefings containing time-sensitive or perishable information may also be provided as needed. DOMEX provides all completed analyses directly to the client agency to ensure compliance with dissemination policies and existing agreements. The requesting agency alone determines the degree of dissemination.

DOMEX provides its support to investigations targeting drug trafficking, money laundering, counterterrorism, and any other investigations that impact U.S. national security. DOMEX can support classified, sensitive, and foreign language investigations.

As criminal organizations increasingly use computers and other data storage devices to further their illegal activities, there is a strong probability that electronic media will be part of the seizure, and it can also be sent to NDIC for analysis. Electronic media include, but are not limited to, computer hard disk drives, removable media, mobile phones, smart phones, personal digital assistants, and gaming systems.

NDIC's Digital Evidence Laboratory (DEL) includes information technology specialists who conduct electronic media exploitation using state-of the-art equipment and technology. They perform the examinations of electronic media onsite or at NDIC. The results of the media exploitation from each request are then incorporated with any documentary evidence from that requestor for a total combined analysis within an overall single DOMEX mission. This ensures a more comprehensive and efficient analytical product.

NDIC created Real-time Analytical Intelligence Database (RAID) to manage large quantities of data gathered during DOMEX missions. RAID is a relational database used to record key pieces of information and to quickly identify links among people, places, businesses, financial accounts, telephone numbers, and other investigative information examined by our analysts.

Key upgrade features include increased data storage, scalability (small database to very large, supporting a few users to hundreds), more comprehensive and efficient analytical tools, enhanced multimedia capability, an import/export wizard, dynamic additional data fields (configurable by users), data access security, easier combination/separation of cases, and the ability to apply data mining technologies across data sets.

NDIC's DOMEX Branch provides its service at no cost to the client agency. In most instances NDIC requests that a case agent or prosecutor travel to NDIC at the client agency's expense to provide background on the case and address analysts' questions during the DOMEX mission.

If the client agency requests onsite support from DOMEX staff, the client is responsible for all travel-related costs. Additionally, if NDIC personnel are required to testify as a result of their support to an investigation, those NDIC travel-related costs will be borne by the client agency.

BigQuery is a serverless data analytics platform. You don't need toprovision individual instances or virtual machines to useBigQuery. Instead, BigQuery automaticallyallocates computing resources as you need them. You can also reserve computecapacity ahead of time in the form of slots, which represent virtual CPUs. Thepricing structure of BigQuery reflects this design.

Compute pricing is the cost to process queries, including SQL queries, user-defined functions,scripts, and certain data manipulation language (DML) and data definitionlanguage (DDL) statements.

Every project that you create has a billing account attached to it. Any chargesincurred by BigQuery jobs run in the project are billed to theattached billing account. BigQuery storage charges are also billedto the attached billing account. You can view BigQuery costs andtrends by using the Cloud Billing reports page in the Google Cloud console.

Capacity pricing (per slot-hour).With this pricing model, you are charged for compute capacity used to run queries,measured in slots (virtual CPUs) over time. This model takes advantage ofBigQuery editions.You can use the BigQuery autoscaler or purchase slot commitments, whichare dedicated capacity that is always available for your workloads, at a lower price.

With on-demand pricing, you will generally have access to up to 2,000concurrent slots, shared among all queries in a single project. Periodically,BigQuery will temporarily burst beyond this limit to acceleratesmaller queries. In addition, you might occasionally have fewer slots availableif there is a high amount of contention for on-demand capacity in a specificlocation.

BigQuery editions offer pay as you go pricing(with autoscaling) and optional one year and three year commitments. With editions,you consume query processing capacity, measured in slots, rather than being billedfor bytes processed.

Long-term storage includes any table or table partition that has not beenmodified for 90 consecutive days. The price of storage for that tableautomatically drops by approximately 50%. There is no difference inperformance, durability, or availability between active and long-term storage.

Storage pricing is based on the amount of data stored in your tables. The size of the data is calculated based on the data types of theindividual columns. For a detailed explanation of how data size is calculated,see Data size calculation.

If the data in a table is not modified or deleted within 90 consecutive days, it is billed at the long-term storagerate. There is no degradation of performance, durability,availability, or any other functionality when a table is considered long-termstorage.

Each partition of a partitioned table is considered separately for long-termstorage pricing. If a partition hasn't been modified in the last 90 days, thedata in that partition is considered long term storage and is charged at thediscounted price.

4. Data is not automatically deleted from your Cloud Storage bucket afterit is uploaded to BigQuery. Consider deleting the data from your Cloud Storagebucket to avoid additional storage costs. SeeCloud Storage pricing.

5. Costs apply for connectors provided by third-party partners. The pricingmodel differs for different partners and connectors. For more pricing details,refer to individual connectors when enrolling in Marketplace.

Each transfer you create generates 1 or more runs per day. Each run maintains arecord of each unique ID encountered and the date the transfer run completes.IDs are only counted on the day the transfer completes. For example, if atransfer run begins on July 14th but completes on July 15th, the unique IDs arecounted on July 15th.

If a unique ID is encountered in more than one transfer run on a particular day,it is counted only once. Unique IDs are counted separately for differenttransfers. If a unique ID is encountered in runs for two separate transfers, theID is counted twice.

Because all runs finish on the same day, you are charged based on4 unique IDs: A, B, C, D. Because ID A and ID C were recorded in twodifferent runs that completed on the same day, IDs A and C are counted only once.If the 3 transfer runs complete every day for a month, your monthly charge isbased on 4 unique IDs. If the transfer runs complete fewer times than the numberof days in the month in which they run, the charges are prorated.

3a8082e126