Prosecutors

    Advanced Digital Investigations: Finding Evidence for Solving Violent Crimes

    This webinar presented by subject matter experts will cover the skills necessary to perform advanced cyber investigations using legal, open source, and closed source data. Attendees will learn the concepts and possibilities on how to identify those committing the most heinous crimes. We will look at a range of techniques for finding the who done it, from obtaining more evidence to looking through the eye of the criminal and discovering how they chose and researched their victim. We will look at what can be done for crimes committed in public and private spaces. We will look at solutions for finding those selling opioids on the dark web through good, old-fashioned police work. We will discuss the interconnections between legal returns, open source, and closed source information by examining each and then walking through case studies where the methods were applied. We will discuss techniques for unmasking people who are using VPNs, TOR, encrypted email services, sock-puppet accounts, and more, followed by a conversation on the way of solving an investigation through the eyes and actions of a criminal, from before and after he/she committed the act. The webinar will provide a roadmap on how to complete these tasks efficiently and cost-effectively while protecting the civil rights of those we are committed to safeguarding. The NCPTF provides ongoing consultation, assistance, and guidance as needed to implement this training. The webinar is for executives and investigators from senior cyber and homicide investigators to new investigators, prosecutors, analysts, supervisors, and everyone in between.

    CI102 Basic Cyber Investigations: Dark Web & Open Source Intelligence (Virtual, Sep. 7–9, 2021)

    This course provides expert guidance in the skills law enforcement officers need to conduct successful online investigations. Topics include IP addresses and domains, an overview of currently popular social media platforms, best practices for building an undercover profile, foundational knowledge related to the dark web, and the use of the dark web as an investigative tool. Instructors demonstrate both open source and commercially available investigative tools for social engineering, information gathering, and artifacts related to social media, as well as automated utilities to capture information and crawl websites.

    DF205 Intermediate Digital Forensic Analysis: SQLite Primer (Sept. 7, 2021, Virtual)

    Mobile devices dominate the intake list and the desks of most digital forensics analysts globally. Devices are becoming more secure, with an increase in security; the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS, Android, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data, we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

    FC099 Basic Level Spreadsheeting Skills (Sept. 14, 2021, Virtual)

    This one-day course provides foundational spreadsheeting knowledge and skills to enhance workplace productivity. The course covers basic navigation of Microsoft Excel by combining live demonstrations and hands-on exercises.

    DF330 Advanced Digital Forensic Analysis: iOS & Android (Sep. 13–16, 2021, Virtual)

    This course provides the advanced skills and knowledge necessary to analyze data on iOS devices (iPod Touch, iPhone, and iPad) and Android devices at an advanced level. Students use forensically sound tools and techniques to analyze potential evidence, employing advanced techniques to uncover evidence potentially missed or misrepresented by commercial forensic tools. Topics include identifying potential threats to data stored on devices, using available acquisition options, accessing locked devices, and understanding the default folder structure. Core skills include analyzing artifacts such as device information, call history, voicemail, messages, web browser history, contacts, and photos. Instruction is provided on developing the "hunt" methodology for analyzing third-party applications not supported by commercial forensic tools.

    FC111 Financial Crimes Against Seniors Seminar (Sept. 14, 2021, Virtual)

    This course promotes a multiagency approach to the problem of financial exploitation of senior citizens. Topics include working with senior victims, examining documents like bank records and power of attorney, and using resources for investigation and community awareness. Detailed examination of a case study, from initial complaint to prosecution, reinforces and illustrates the course content. With a dual focus on financial abuse by trusted persons and common scams aimed at seniors, the course introduces senior-specific investigative skills while facilitating networking and cooperation that can extend out of the classroom and into real cases.

    DF100 Basic Digital Forensic Analysis: Seizure (Sept. 16, 2021, Virtual)

    This course introduces the information and techniques law enforcement personnel need to safely and methodically collect and preserve digital evidence at a crime scene. Topics include recognizing potential sources of digital evidence; planning and executing a digital evidence-based seizure; and the preservation, packaging, documentation, and transfer of digital evidence.

    FC122 Intellectual Property Theft Training (Sept. 16, 2021, Virtual)

    This course introduces the problem of intellectual property (IP) theft and provides tools, techniques, and resources for investigating and prosecuting these crimes. A combination of lecture, discussion, and interactive exercises illustrates the potential dangers and economic repercussions of counterfeit products, as well as best practices and techniques for investigating IP theft. Students are provided with a state-specific workbook that includes relevant statutes, sample organizational documents for IP investigations, and additional resources for investigators and prosecutors.

    DF201 Intermediate Digital Forensic Analysis: Automated Forensic Tools (Sept. 21–24, 2021)

    This course provides students with the fundamental knowledge and skills necessary to perform a limited digital forensic examination, validate hardware and software tools, and effectively use digital forensic suites and specialized tools. The course begins with a detailed review of the digital forensic examination process, including documentation, case management, evidence handling, validation, and virtualization. Students learn to use today's leading commercial and open source digital forensic suites: Magnet Axiom, X-ways Forensic, and Autopsy. Instruction on each suite will include an interface overview, configuration, hashing, file signature analysis, keyword searching, data carving, bookmarking, and report creation.

    FC105 Financial Records Examination and Analysis (Sept. 21–23, 2021, Virtual)

    This course covers the acquisition, examination, and analysis of many types of financial records, including bank statements and checks, wire transfer records, and business records. Topics include recognizing and investigating common indicators of fraud, using spreadsheets to facilitate analysis and pattern recognition, and financial profiling. There is a strong focus on presenting financial evidence in multiple modalities: spreadsheet data outputs, graphic representations, and written/oral presentations.

    Pages