Training

    CI130 Basic Cyber Investigations: Cellular Records Analysis

    This course is for officers, investigators, and analysts who encounter cell phone evidence that includes information external to the phone. Class concepts include instruction on how to request, read, and analyze call detail records from cellular providers; and how to plot cellular site locations to determine the approximate position of a suspect during a given period. No special hardware or software is required. However, this course focuses heavily on analysis; as such, a strong working knowledge of Microsoft Excel is highly recommended. Students are provided with a free copy of NW3Cs PerpHound tool, which assists in the plotting of call detail record locations.

    *Cellular technology. Land-line and cellular networks. Types and generations of cell phones. Cell site design and its implications for law enforcement.
    *Analysis of call detail records. Request information from service providers. Convert records into a useful format. *Merge two related spreadsheets. Read and analyze using filters, sorting, and pivot tables. Plot location information.
    *Hands-on experience. Hands-on experience with NW3Cs free software tool PerpHound and Microsoft Excel to analyze various types of records that are available from cellular providers.

    IA102 Introduction to Link Analysis

    This course introduces analysts to the broader concepts of connecting the dots through link analysis. A critical portion of conducting a successful analytical investigation is the ability to link together and understand the complexities of the connectedness between people and organizations. Introduction to Link Analysis (ILA) expands on the basic principles of link and association analyses explored in the Foundations of Intelligence Analysis Training (FIAT) while building a framework for more advanced methods such as social network analysis.

    Expanding basic knowledge of link and association analysis
    Explaining the process of social network analysis
    Understanding the visual mapping and mathematical components associated with link and social network analyses

    FC111 Financial Crimes Against Seniors Seminar

    This course promotes a multi-agency approach to the problem of financial exploitation of senior citizens. Topics include working with senior victims, examining documents like bank records and power of attorney, and resources for investigation and community awareness. Detailed examination of a case study from initial complaint to prosecution reinforces and illustrates the course content. With a dual focus on financial abuse by trusted persons and common scams aimed at seniors, the course introduces senior-specific investigative skills while facilitating networking and cooperation that can extend out of the classroom and into real cases.

    Unlocking the Power of OSINT: Advanced Searching Techniques for Law Enforcement Investigators and Analysts

    Are you a law enforcement professional seeking to sharpen your investigative skills in the digital age? Look no further! Our upcoming webinar will equip you with the tools and strategies needed to excel in online investigations using Google, Bing, and others. During this webinar, you will learn how to master advanced queries, including how to create precise Google and Bing "dorks" (advanced search queries) to uncover specific online mentions. You will also discover techniques to limit searches to specific parameters, such as keywords in titles, URLs, or results from specific domains. Utilizing these techniques, you can cut through the clutter and advertisements, identifying posts mentioning individuals, locations, companies, or specific events with pinpoint accuracy. This webinar will include brand new instruction on how to leverage AI tools like ChatGPT 4, Bing Copilot, and Google Gemini to streamline your efforts.

    Presented by:
    Megan Munoz, Intelligence Specialist, NW3C

    DF100 Basic Digital Forensic Analysis: Seizure

    This course introduces the information and techniques law enforcement personnel need to safely and methodically collect and preserve digital evidence at a crime scene. Topics include recognizing potential sources of digital evidence; planning and executing a digital evidence-based seizure; and the preservation, packaging, documentation, and transfer of digital evidence.

    *Prepare. Prepare to respond to an incident or crime scene where digital evidence may be present.
    *Identify. Learn tow to identify relevant sources of digital evidence in an ever-evolving landscape.
    *Collect. Learn the proper methods of digital evidence collection.
    *Preserve. Build upon the three previous principles to ensure valid and legal preservation of digital evidence can occur.

    FC201 Financial Records Investigative Skills

    This course builds on the concepts introduced in FC101 (FIPS) and FC105 (FREA), introducing investigators and prosecutors to emerging issues in financial crime. Topics include money laundering, analyzing large financial data sets, conducting effective interviews, and managing large amounts of financial evidence. This course consists of a mix of lecture, discussion, and hands-on exercises. Students conduct a mock investigation that includes interviews, data analysis, and the examination of various documents.

    *Money laundering. Methods of laundering money. Tracing illegal funds. Emerging issues. FinCEN.
    *Spreadsheeting skills. Spreadsheet architecture. Formulas and calculations. Pivot tables.
    *Working with financial data. Benfords law analysis. Disentangling commingled funds.
    *Hands-on experience. Work a mock financial case as part of an investigative team.

    PT101 Introduction to Cybercrime Units for Prosecutors

    This course provides an overview of the actions investigators can take at the outset of a financial crime investigation. Students learn to ask critical questions, gather documentation, and analyze information for leads. Topics include obtaining and working with financial records, red flags in financial cases, money laundering, investigative strategies for different types of financial crimes, and commingled funds.

    Transnational Gift Card Scam and Money Laundering Investigation

    Case synopsis of a Transnational Gift Card Scam laundering $26 million in fraudulently obtained gift cards through major retailers across the United States. Suspects were targeting victims with multiple different scams (Grandparent Scam, Arrest Warrant Scam, Apple Scam, Norton Anti-virus Scam, Publishers Clearing House Scams, and more). Victims were told to purchase Walmart and Target gift cards and provide the card information over the phone to the Scammers. Scammers would electronically transmit the cards to money mules across the U.S. and the cards were redeemed for Apple Products and other gift cards.

    Presented by:
    Detective Jeff Prater, Colleyville, TX, Police Department Special Investigations Unit, US Secret Service Cyber Crimes Task Force.

    NW3C does not share webinar attendees' personally identifiable information with any third party without opt-in consent given during registration.

    The content, views, and opinions expressed in this presentation are those of the individual presenters and do not represent official policy, opinions, or view of NW3C

    Using Autopsy to Triage Systems

    In this webinar, we will explore the features in Autopsy that can be used to triage a system. We will start with a brief intro to Autopsy then look at the following Triage features: Ingest File Filters/Profiles, Autopsy Live Triage Drive and Autopsy Logical Imager. These features can help with the triage of systems and determine if a deeper dive is warranted. A demonstration of the features will be part of the presentation.

    Presented by:
    Mark McKinnon, Senior Security Analyst, Sleuthkit Labs

    NW3C does not share webinar attendees personally identifiable information with any third party without opt-in consent given during registration.

    The content, views, and opinions expressed in this presentation are those of the individual presenters and do not represent official policy, opinions, or view of NW3C.

    Pages