Tribal Justice Agencies

    Cyber Threats to Public Safety: Part 1

    In today's cyber threat environment, attackers and defenders are constantly trying to outmaneuver each other and the stakes are higher than ever, particularly for mission-critical systems and communications. Understanding the methods and motivations of threat actors is crucial to developing a proactive program to defend against and prevent future attacks. In part one of our four part webinar series, we will introduce our insights and analysis of the most significant and impactful cyber threats facing public safety organizations. In our review of the 2022 landscape, we will breakdown the drivers of the threat actors seeking to profit or cripple mission critical systems, while introducing how we seek to combat these threats with collaboration and intelligence sharing through the Public Safety Threat Alliance (PSTA). We will also share details about the PSTAs free membership for public safety agencies, and how they can join this critical information sharing community today and begin improving their cybersecurity posture against cyber threats to their critical systems.

    Deep Dive into the Networking of the Internet of Things (IoT)

    By the year 2025, it is expected that there will be over 45 billion connected devices around the world that is 9.27 connected devices per person. The Internet of Things (IoT) utilizes a variety of communication standards and a unique set of networking protocols to connect these devices. This webinar will explore these unique IoT networking protocols along with their varied IoT topography and explain IoT network interrogation techniques to be used in an investigation. Topics will include, connectivity communication options and a review of some of the more commonly located "Mesh" Personal Area Networks (PAN) and Home Local Area Networks (HAN), such as Matter, Thread, Z wave, and Zigbee that may be encountered during an investigation.

    DF320 Advanced Digital Forensic Analysis: macOS

    This course prepares students to identify various artifacts typically located in property lists and SQLite databases on MacOS-based computers, as well as learn how to perform forensic analysis. Students gain hands-on practical experience writing basic SQL queries and using to analyze operating system artifacts that includes, but is not limited to, user login passwords, FaceTime, messages, mail, contacts, calendars, reminders, notes, photos, Safari, Google Chrome, and Mozilla Firefox.

    DF320 Advanced Digital Forensic Analysis: macOS

    This course prepares students to identify various artifacts typically located in property lists and SQLite databases on MacOS-based computers, as well as learn how to perform forensic analysis. Students gain hands-on practical experience writing basic SQL queries and using to analyze operating system artifacts that includes, but is not limited to, user login passwords, FaceTime, messages, mail, contacts, calendars, reminders, notes, photos, Safari, Google Chrome, and Mozilla Firefox.

    DF202 Intermediate Digital Forensic Analysis: Windows File Systems

    This course provides students with the fundamental knowledge and skills necessary to perform a limited digital forensic examination, validate hardware and software tools, and effectively use digital forensic suites and specialized tools. The course begins with a detailed study of the digital forensic examination process, including documentation, case management, evidence handling, validation, and virtualization. Students learn to use today's leading commercial and open source digital forensic suites: Magnet Axiom, X-ways Forensic, and Autopsy. Instruction on each suite will include an interface overview, configuration, hashing, file signature analysis, keyword searching, data carving, bookmarking, and report creation.

    *Digital forensic process. Evidence review; requests for examination; case management.
    *Validation. Creation of validation images; validation testing.
    *Effective tool usage. Tool interface; hashing; file signature analysis; data carving; searching; metadata; bookmarking.
    *Reporting. General report structure; report templates; using tool-generated reports.

    FC110 Financial Crimes Against Seniors

    This course promotes a multi-agency approach to the problem of financial exploitation of senior citizens. Bringing together law enforcement personnel and adult protective services investigators, the course enhances students investigative skills and interviewing techniques while facilitating networking and cooperation that can extend out of the classroom and into real cases. Topics include recognizing elder abuse, working with victims, identifying perpetrators, and resources for investigation and community awareness. Students work together to conduct a mock investigation into a hypothetical case.

    *Financial investigation basics. What constitutes elder abuse? Family and trusted persons as perpetrators. Statutes and sentencing enhancements.
    *Senior victims. Reasons for vulnerability. Special needs like Alzheimers or dementia.
    *Resources. Community awareness and investigative resources.
    *Hands-on experience. Work a case as part of an investigative team.

    IA300 Advanced Criminal Intelligence: Tradecraft and Analysis

    This three-day course is dedicated to studying the fundamentals of quantitative and qualitative data analysis and how to formulate arguments in support of criminal investigations and intelligence. Students will learn about data management techniques and a disciplined process to clean and standardize data in preparation for analysis. The course will also explore several common investigative objectives, including the discovery of associations between people and entities, the correlation between unlawful activity and suspects, behavioral affinities, and predictions. The course will introduce the Enterprise Theory of Crime and how to use network analysis to formulate conclusions about the structure of criminal organizations, their players and roles, the identification of facilitators, charting of financial arrangements, and connections to unlawful activity. The course enables the production of valuable, accurate, and efficient logical inferences produced by collecting data related to unlawful activity.

    FC101 Financial Investigations Practical Skills

    This course provides hands-on investigative training at a basic level. Students develop the practical skills, insight, and knowledge necessary to manage a successful financial investigation from start to finish, including the acquisition and examination of financial records, interview skills, and case management and organization. Additional topics include forgery and embezzlement, financial exploitation of the elderly, working with spreadsheets, financial profiling, and state-specific statutes and legal issues.

    *Emerging issues. Current trends in various types of financial crimes. Recent cases and their implications.
    *Financial records. Learn to obtain and manage bank records, including basic spreadsheeting skills.
    *Working with data. Extract leads and draw conclusions from bank records and other financial data.
    *Hands-on experience. Work a mock financial case as part of an investigative team.

    IA105 Intelligence Writing and Briefing

    This course covers basic intelligence writing and briefing principles as well as methods for effective and clear intelligence sharing. Topics covered include creative and critical thinking, critical reading skills, source evaluation, privacy and civil rights, intelligence writing style and structure, and generating and presenting intelligence briefings. With guidance from experienced experts, students gain hands-on experience by working through data sets based on real cases to produce intelligence products. Instructors and peers provide feedback on briefings and reports produced and presented in class.

    *Foundational skills. Creative thinking. Critical thinking. Critical reading.
    *Information sources. Identify sources of intelligence information. Evaluate sources for validity and reliability.
    *Analytical reports. Develop a structured and actionable analytical report based on a data set given in class.
    *Privacy considerations. Ensure protection of privacy and civil rights while producing intelligence products.
    *Briefings. Construct and deliver an intelligence briefing based on a data set given in class.

    FC204 Combating Transnational Crime & Terrorism Financing

    An effective financial investigation can disrupt terrorism organizations and interrupt, deter, or even stop operational terrorism activities before they can begin. In this three-day course, students develop an understanding of how financial systems are used to support terrorism activities and transnational criminal organizations. Students will work with tools and methods to investigate the manipulation of financial, communication, and business systems used for illicit purposes. Students will learn how to work with suspicious activity reports, crucial financial records such as Society for Worldwide Interbank Financial Telecommunications (SWIFT) messaging, and records used in banking and money services businesses. They will also learn how to gather information and evidence on other means of value transfer methods associated with money laundering, the black-market peso and forms of trade-based money laundering, hawala, and other alternate remittance systems, and virtual assets (cryptocurrency).

    Pages