The United States Department of Justice Department of Justice Seal The United States Department of Justice
Search Archive

DOMEX Provides
Digital Evidence Laboratory
Key NDIC Tool--Raid
Cost to Client Agency
How to Obtain DOMEX Support

          Brochure  PDF  (801 KB)
          Document and Media Exploitation Customer Guide pdf (1,674 KB)
          Sample DOMEX Request Letter


The National Drug Intelligence Center (NDIC) Document and Media Exploitation (DOMEX) Branch has developed a uniquely efficient approach that allows its DOMEX analysts to quickly prioritize, organize, and analyze significant amounts of seized documentary and electronic evidence.

NDIC's DOMEX methodology integrates input from the requesting agencies' case agents, prosecutors, and analysts into the DOMEX mission planning process, thereby ensuring that the DOMEX mission will be focused to meet the needs and priorities of the requesting agencies. In conjunction with the input from the requestors, our experienced DOMEX analysts establish the Priority Intelligence Requirements (PIRs) for each DOMEX mission, thereby limiting the scope of the mission to the most important elements particular to the requestor's investigation.

NDIC's DOMEX analysts are able to quickly identify assets, the key associations and other investigative leads from their analysis of the evidence. As a result, investigators, prosecutors, and analysts can more rapidly determine the scope of their evidentiary holdings, identify previously unknown relationships and assets, and better prepare for court proceedings. All DOMEX personnel are trained in proper evidence-handling techniques to ensure that our services are conducted with the utmost professionalism.

DOMEX Provides:

Timely Intelligence Support Reports (ISRs) containing actionable findings, methodologies, associates, or other investigative leads, including:

  • Financial information and asset identification

  • Biographical data and criminal methodologies

  • Relevant organizationconnections and associations
  • A detailed inventory of suspect findings
  • Computer-assisted analyses such as link analysis, matrix analysis, time line analysis using i2 Analyst's Notebook, and geospatial analysis using ArcView Geographic Information Systems

  • Real-time results: all documents typically analyzed in a 2-week period


A photograph of our analysts at work

NDIC conducts the majority of its DOMEX missions at NDIC headquarters in Johnstown, Pennsylvania. NDIC has also partnered with the Utah National Guard in the establishment of an NDIC DOMEX team in Salt Lake City, Utah. This DOMEX team works primarily on the DOMEX missions that include any foreign language materials (i.e., Spanish). There are five other DOMEX teams located at the following OCDETF Strike Forces locations: Atlanta, Georgia; El Paso, Texas; Houston, Texas; Phoenix, Arizona; and San Diego, California. They directly support the OCDETF investigations in those OCDETF regions. DOMEX may also travel and work onsite when deemed necessary.

To Top


DOMEX provides new leads immediately as they are identified throughout the DOMEX mission, along with providing a comprehensive and fully sourced Intelligence Support Report (ISR), which is provided at the end of the mission, in both hard and soft copy. The ISR contains all actionable findings, including previously unknown links, financial information, and asset identification. DOMEX also provides an out-brief of the significant findings at the conclusion of the mission. DOMEX analysts are trained to identify assets for seizure and contribute significantly to forfeiture efforts.

After each mission, DOMEX may provide further analytical services such as charts, time lines, and geographical mapping products, if needed, subsequent to the mission for court proceedings. Additional interim reports or briefings containing time-sensitive or perishable information may also be provided as needed. DOMEX provides all completed analyses directly to the client agency to ensure compliance with dissemination policies and existing agreements. The requesting agency alone determines the degree of dissemination.

DOMEX provides its support to investigations targeting drug trafficking, money laundering, counterterrorism, and any other investigations that impact U.S. national security. DOMEX can support classified, sensitive, and foreign language investigations.

Digital Evidence Laboratory

As criminal organizations increasingly use computers and other data storage devices to further their illegal activities, there is a strong probability that electronic media will be part of the seizure, and it can also be sent to NDIC for analysis. Electronic media include, but are not limited to, computer hard disk drives, removable media, mobile phones, smart phones, personal digital assistants, and gaming systems.

NDIC's Digital Evidence Laboratory (DEL) includes information technology specialists who conduct electronic media exploitation using state-of the-art equipment and technology. They perform the examinations of electronic media onsite or at NDIC. The results of the media exploitation from each request are then incorporated with any documentary evidence from that requestor for a total combined analysis within an overall single DOMEX mission. This ensures a more comprehensive and efficient analytical product.


Real-Time Analytical Intelligence Database (RAID)NDIC created Real-time Analytical Intelligence Database (RAID) to manage large quantities of data gathered during DOMEX missions. RAID is a relational database used to record key pieces of information and to quickly identify links among people, places, businesses, financial accounts, telephone numbers, and other investigative information examined by our analysts.

The software runs on any Windows operating system (Windows 2000 or higher), in any mode of operation (stand-alone or LAN).

RAID can be used as an analytical tool for information obtained from any kind of investigation. It can also be utilized for case management. NDIC has enhanced RAID to meet the expanding support requirements of the intelligence and law enforcement communities. RAID also facilitates NDIC’s capability to conduct cross-case analysis.

Key upgrade features include increased data storage, scalability (small database to very large, supporting a few users to hundreds), more comprehensive and efficient analytical tools, enhanced multimedia capability, an import/export wizard, dynamic additional data fields (configurable by users), data access security, easier combination/separation of cases, and the ability to apply data mining technologies across data sets.

RAID is currently available free of charge, and thousands of copies of this application have already been distributed to appropriate law enforcement and intelligence agencies worldwide.

See our RAID page for further information.

Cost to Client Agency

Composite of images of seized material and equipment

NDIC's DOMEX Branch provides its service at no cost to the client agency. In most instances NDIC requests that a case agent or prosecutor travel to NDIC at the client agency's expense to provide background on the case and address analysts' questions during the DOMEX mission.

If the client agency requests onsite support from DOMEX staff, the client is responsible for all travel-related costs. Additionally, if NDIC personnel are required to testify as a result of their support to an investigation, those NDIC travel-related costs will be borne by the client agency.

How to Obtain DOMEX Support

DOMEX support is available to federal agencies or multiagency law enforcement task forces and is determined on a priority basis. Any agency wishing to obtain support should submit a formal request to the Chief of the NDIC DOMEX Branch. The request should be made via the client agency’s established protocol and should include:

  • the investigation summary
  • the priority of the investigation within the requestor’s division,
  • and an estimate of the nature and volume of the seized material to be analyzed by DOMEX.

Optimally, all requests should be submitted to NDIC in advance of the projected seizure to ensure adequate case and logistical preparation. In most instances a telephonic assessment of the investigation and seized material will be conducted. For complex investigations or large quantities of seized material, it may be necessary for a DOMEX advance team to conduct an assessment at the requesting field office. A final determination of DOMEX support will be made after the assessment is completed.

Please send all requests for DOMEX support as well as copies of RAID to:

Document and Media Exploitation Branch
National Drug Intelligence Center
319 Washington Street, 5th Floor
Johnstown, PA 15901-1622

Telephone: (814) 532-4601
Fax: (814) 532-5854

To Top

National Drug Intelligence Center General Informtion
NOTE: On June 15, 2012, the National Drug Intelligence Center will close. This web site will no longer be maintained. The documents that are currently on this site may contain dated information. They remain available to provide access to historical materials.
Stay Connected YouTube Twitter Facebook Sign Up for E-Mail Updates Subscribe to News Feeds