TTA Catalog List

This course covers the skills and techniques involved in responding to a network security incident. The course focuses on the identification, extraction, and detailed examination of artifacts associated with network and intrusions. Memory analysis, host machine forensics, network traffic and log analysis, malware analysis, and virtual machine sandboxing are covered through lecture, discussion, and hands-on exercises. Additional topics include key cybersecurity concepts and issues, as well as the various classifications and types of network attacks.

This course provides the technical and legal information prosecutors need to see cases involving digital evidence through the entire criminal justice process, from seizure and extraction to admissibility to verdict. Topics include digital evidence commonly seized during the execution of a search warrant, issues specific to mobile phones, digital evidence stored remotely ("in the cloud"), and the processes investigators use to obtain this evidence, such as the interrogation of digital devices. There is a strong focus on case law, ethics, and other legal issues surrounding the collection and custody of digital evidence, as well as its use at trial. The course also examines new legislation like the CLOUD Act, which is reforming the digital evidence landscape just as rapidly as the ever-changing case law.

This course covers the skills investigators need to conduct successful online investigations involving social media. Topics include internet basics such as IP addresses and domains, an overview of currently popular social media platforms, and best practices for building an online undercover profile. Instructors demonstrate both open-source and commercially available investigative tools for social engineering, information gathering, and artifacts related to social media, as well as automated utilities to capture information and crawl websites.

Blockchain technology is not only a disruptive new payment rail, but also is the next phase in the evolution of the Internet. This new technology presents unique investigative challenges for law enforcement and regulatory agencies of all sizes. This fast-paced class assumes that attendees have no prior knowledge of blockchain technology, but seek to gain a foundational understanding of it.

This course is for officers, investigators, and analysts who encounter cell phone evidence that includes information external to the phone. Class concepts include instruction on how to request, read, and analyze call detail records from cellular providers, as well as how to plot cellular site locations to determine the approximate position of a suspect during a given period. No special hardware or software is required. However, this course focuses heavily on analysis; as such, a strong working knowledge of Microsoft Excel is highly recommended.

Students are provided with a free copy of the National White Collar Crime Center's (NW3C) PerpHound tool, which assists in the plotting of call detail record locations.

According to the Bureau of Justice Statistics’ 2016 report, people with disabilities were more than three times more likely to experience violent crime than people without disabilities from 2010 to 2014. At the same time, only 13 percent of violent crime victims with disabilities received assistance from non-police victim services agencies. The recent increases in state Victims of Crime Act (VOCA) victim assistance grants create a unique opportunity to increase the number of crime victims with disabilities who access victim services.

Elder abuse is a growing issue faced by older adults, and the effects of abuse can negatively impact the physical health, mental well-being, and financial stability of victims. The challenges of elder abuse prevention, detection, and litigation are heightened for older adults who are less connected to resources. Older adults who are isolated, either situationally or geographically, often have challenges accessing the help they need to prevent against and seek help following elder abuse.

This course covers the skills investigators need to conduct successful online investigations involving social media. Topics include internet basics such as IP addresses and domains, an overview of currently popular social media platforms, and best practices for building an online undercover profile. Instructors demonstrate both open-source and commercially available investigative tools for social engineering, information gathering, and artifacts related to social media, as well as automated utilities to capture information and crawl websites.

This course provides attendees with fundamental knowledge and skills related to the dark web and virtual currency. The course focuses on the investigation of crimes committed on or through the dark web, how the dark web can be used as an investigative tool, and the investigation of crimes involving virtual currency.

Construction of a new public safety facility is a rare occurrence for most agencies. The person tasked as project owner or manager may have little or no experience in this area because it is often a once-in-a-career situation. This case study of constructing the Chandler Public Safety Training Center will assist law enforcement planners and others that are given this type of opportunity with an overview of constructing a contemporary facility. Following this webinar, participants will know:

This course covers the fundamentals of computer operations, hardware function, configuration, and best practices for the protection, preservation, and imaging of digital evidence. Presentations and hands-on exercises cover topics such as partitioning, data storage, hardware and software write blockers, the boot-up and shutdown processes, live imaging, encryption detection, and duplicate imaging. This course incorporates computer forensic applications that experienced practitioners are currently using in the field.

This course covers the usage and configuration of two tools (Paladin/Autopsy and osTriage) designed to preview a non-mobile digital device and export files of evidentiary value. Day One is designed to preview a non-mobile digital device and export files of evidentiary value from a device that is powered on. Day Two is designed to preview a non-mobile digital device and export files of evidentiary value from a device that is powered off.