Justice Information Sharing

DF320 Advanced Digital Forensic Analysis: macOS (Jan. 11, 2021, Virtual)

This course teaches students to identify and collect volatile data, acquire forensically sound images of Apple Macintosh computers, and perform forensic analysis of macOS operating system and application artifacts. Students gain hands-on experience scripting and using automated tools to conduct a simulated live triage, and use multiple methods to acquire forensically sound images of Apple Macintosh computers. Topics include how the macOS default file system stores data, what happens when files are sent to the macOS Trash, where operating system and application artifacts are stored, and how they can be analyzed. Forensic artifacts covered include password recovery, recently opened files and applications, encryption handling, Mail, Safari, Messages, FaceTime, Photos, Chrome, and Firefox.

CI101 Basic Cyber Investigations: Digital Footprints (Jan. 13, 2021, Virtual)

This course introduces learners to the concept of digital footprints and best practices in protecting personally identifiable information (PII). Topics include limiting an individual’s digital footprint, protecting privacy on social media, and the consequences of oversharing personal information, as well as steps to take after becoming a target of doxing.

DF100 Basic Digital Forensic Analysis: Seizure (Jan. 11, 2021, Virtual)

This course introduces the information and techniques law enforcement personnel need to safely and methodically collect and preserve digital evidence at a crime scene. Topics include recognizing potential sources of digital evidence; planning and executing a digital evidence-based seizure; and the preservation, packaging, documentation, and transfer of digital evidence.

CI103 Basic Cyber Investigations: Advertising Identifiers (Jan. 27, 2021, Virtual)

This one-day course, focused on device location information, is for law enforcement investigators and analysts. Class concepts include device identifiers (IDs) in general, advertising IDs in detail, important legal considerations, overall investigative process, and tools available to law enforcement. Students will use commercially available investigative tools for querying databases of Advertising IDs and displaying their recorded broadcast locations.

DF330 Advanced Digital Forensic Analysis: iOS & Android (Jan. 25, 2021, Virtual)

This course provides the advanced skills and knowledge necessary to analyze data on iOS devices (iPod Touch, iPhone, and iPad) and Android devices at an advanced level. Students use forensically sound tools and techniques to analyze potential evidence, employing advanced techniques to uncover evidence potentially missed or misrepresented by commercial forensic tools. Topics include identifying potential threats to data stored on devices, using available acquisition options, accessing locked devices, and understanding the default folder structure. Core skills include analyzing artifacts such as device information, call history, voicemail, messages, web browser history, contacts, and photos. Instruction is provided on developing the "hunt" methodology for analyzing third-party applications not supported by commercial forensic tools.

DF201 Intermediate Digital Forensic Analysis: Automated Forensic Tools (Jan. 19-22, 2021, Virtual)

This course provides students with the fundamental knowledge and skills necessary to perform a limited digital forensic examination, validate hardware and software tools, and effectively use digital forensic suites and specialized tools. The course begins with a detailed review of the digital forensic examination process, including documentation, case management, evidence handling, validation, and virtualization. Students learn to use today's leading commercial and open source digital forensic suites: Magnet Axiom, X-ways Forensic, and Autopsy. Instruction on each suite will include an interface overview, configuration, hashing, file signature analysis, keyword searching, data carving, bookmarking, and report creation.

CI130 Basic Cyber Investigations: Cellular Records Analysis (Jan. 19, 2021, Virtual)

This course is for officers, investigators, and analysts who encounter cell phone evidence that includes information external to the phone. Class concepts include instruction on how to request, read, and analyze call detail records from cellular providers, and how to plot cellular site locations to determine the approximate position of a suspect during a given period. No special hardware or software is required. However, this course focuses heavily on analysis; as such, a strong working knowledge of Microsoft Excel is highly recommended. Students are provided with a free copy of the National White Collar Crime Center's (NW3C) PerpHound tool, which assists in the plotting of call detail record locations.

DF100 Basic Digital Forensic Analysis: Seizure (Jan. 28, 2021, Virtual)

This course introduces the information and techniques law enforcement personnel need to safely and methodically collect and preserve digital evidence at a crime scene. Topics include recognizing potential sources of digital evidence; planning and executing a digital evidence-based seizure; and the preservation, packaging, documentation, and transfer of digital evidence.

Webinar - Shadow Economy 101

Communities are under siege by crimes for profit. When criminals make money (regardless of method: fraud, human trafficking, drugs, counterfeit or stolen goods, cargo, identity theft, or organized retail theft), they create a shadow economy. This illicit activity competes with and erodes the economic stability of our communities. Unique research into the economic impact of the shadow economy reveals the critical need to support skilled, targeted investigations and effective prosecution. Unfortunately, there are ever-increasing efforts to decriminalize non-violent crimes. These policies are fueling the unprecedented growth of the shadow economy. In order to defend communities from this threat, investigators will require a counter-narrative to illustrate how these policies are generating more crime, propagating violence, and ultimately leading to urban decay.

SAMHSA’s GAINS Center for Behavioral Health and Justice Transformation, which is run through Policy Research Associates, Inc. (PRA), is convening four topical Communities of Practice (CoPs) to work intensively with select communities on the following topics:

Pages