Tribal Justice Agencies

    Webinar: Cybercrime Insights, Trends, and Investigative Strategies

    From the perspective of the world's largest regulated global crypto exchange, this webinar will provide an introduction to Coinbase's Global Intelligence team, cryptocurrency, and blockchain investigations from an investigator who has been working with law enforcement around the globe for the last seven years. Presenters will also discuss trends in cybercrime, crypto money laundering, ransomware, and cracking down on the darkweb.

    SQLite Survival Series Part II: SQLite Exploration with Forensic Browser for SQLite

    Join Maggie Gaffney of Teel Technologies and NW3Cs Chris Atha as they present the second installment of the three-part Springtime SQLite Survival series. Part I SQLite Statements and Structures highlighted the basic functionality of SQLite. This session will focus on leveraging Sanderson's Forensic Browser for SQLite to dive deeper into SQLite files. Applicable attendees will receive a 4 month license for Sanderson's Forensics SQLite Explorer.

    CI103 Basic Cyber Investigations: Advertising Identifiers (July 27, 2021, Virtual)

    This one-day course, focused on device location information, is for law enforcement investigators and analysts. Class concepts include device identifiers (IDs) in general, advertising IDs in detail, important legal considerations, overall investigative process, and tools available to law enforcement. Students will use commercially available investigative tools for querying databases of Advertising IDs and displaying their recorded broadcast locations.

    CI103 Basic Cyber Investigations: Advertising Identifiers (Aug. 6, 2021, Virtual)

    This one-day course, focused on device location information, is for law enforcement investigators and analysts. Class concepts include device identifiers (IDs) in general, advertising IDs in detail, important legal considerations, overall investigative process, and tools available to law enforcement. Students will use commercially available investigative tools for querying databases of Advertising IDs and displaying their recorded broadcast locations.

    DF205 Intermediate Digital Forensic Analysis: SQLite Primer (Virtual, Aug. 10, 2021)

    Mobile devices dominate the intake list and the desks of most digital forensics analysts globally. Devices are becoming more secure, with an increase in security; the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS, Android, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data, we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

    DF101 Basic Digital Forensic Analysis: Windows Acquisition (Virtual, Aug. 16–18, 2021)

    This course provides the fundamental knowledge and skills required to acquire forensic backup images from Windows-based computers and removable storage media in a forensically sound manner.

    DF205 Intermediate Digital Forensic Analysis: SQLite Primer (Virtual, Aug. 17, 2021)

    Mobile devices dominate the intake list and the desks of most digital forensics analysts globally. Devices are becoming more secure, with an increase in security; the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS, Android, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data, we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

    CI103 Basic Cyber Investigations: Advertising Identifiers (Aug. 26, 2021, Virtual)

    This one-day course, focused on device location information, is for law enforcement investigators and analysts. Class concepts include device identifiers (IDs) in general, advertising IDs in detail, important legal considerations, overall investigative process, and tools available to law enforcement. Students will use commercially available investigative tools for querying databases of Advertising IDs and displaying their recorded broadcast locations.

    DF330 Advanced Digital Forensic Analysis: iOS & Android (Aug. 23–26, 2021, Virtual)

    This course provides the advanced skills and knowledge necessary to analyze data on iOS devices (iPod Touch, iPhone, and iPad) and Android devices at an advanced level. Students use forensically sound tools and techniques to analyze potential evidence, employing advanced techniques to uncover evidence potentially missed or misrepresented by commercial forensic tools. Topics include identifying potential threats to data stored on devices, using available acquisition options, accessing locked devices, and understanding the default folder structure. Core skills include analyzing artifacts such as device information, call history, voicemail, messages, web browser history, contacts, and photos. Instruction is provided on developing the hunt methodology for analyzing third-party applications not supported by commercial forensic tools.

    DF100 Basic Digital Forensic Analysis: Seizure (Aug. 25, 2021, Virtual)

    This course introduces the information and techniques law enforcement personnel need to safely and methodically collect and preserve digital evidence at a crime scene. Topics include recognizing potential sources of digital evidence; planning and executing a digital evidence-based seizure; and the preservation, packaging, documentation, and transfer of digital evidence.

    Pages