Skip to main content

Justice Information Sharing

DF205 Intermediate Digital Forensic Analysis: SQLite Primer

Mobile devices dominate the intake list, and the desks of most digital forensics analyst globally. Devices are becoming more secure, with an increase in security the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS, Android, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

What is SQLite and how to identify and analyze logically
Recognizing relevant locations of valuable data within SQLite database.
Develop skills needed for crafting custom SQLite queries.
Learn how to recognize and decode a variety of common timestamp formats.
Learn how to perform SQLite analysis with automation.

DF203 Intermediate Digital Forensic Analysis: Forensic Video Analysis

This course provides training on digital forensics for video, specifically targeting common file formats rather than proprietary video encodings or delivery methods. It aims to prepare investigators to answer critical questions about the file and ensure key evidence is not overlooked. This training is designed to support investigations by providing the necessary expertise to handle the complexities of video evidence in the digital age, addressing possible pitfalls including deepfakes, manipulated video, and potential overlooked evidence.

Key concepts covered in this course include:
Digital video file creation
Tool and result verification
Metadata and parsing
Image classification
Hash value comparison
Image/video classification and reporting results

Telegram Investigations

This webinar will cover investigations into Telegram app. For many, Telegram has been a frustration as they do not know how the app works, and just what investigative avenues can be pursued. This webinar will cover how Telegram functions, how Telegram channels work, how Telegram Bots work to facilitate sales, and also explore the T.O.N. (The Open Network) crypto currency that is built upon the Telegram network. Case studies will be shown, as well in depth investigative techniques. There has never been a more comprehensive webinar about the end-to-end encryption messaging app than this!

Presented by:
Keven Hendricks, Detective, City of New Brunswick, NJ, Police Department

Open-Source Investigative Methods for Counter Narcotics and Human Trafficking Investigations

Threat actors are increasing their use of the Internet, social media and apps to conceal and advance their trafficking operations. Open-source information can provide investigators with intelligence and investigative leads related to narcotics and human trafficking operations. This webinar will provide attendees with introductory methods related to open-source information collection as it applies to identifying online profiles and activity related to narcotics and human trafficking. Attendees will learn how to safely navigate social media platforms while adhering to local laws and methods of collection.

Presented by:
Adam Scarisbrick, Senior Instructor, Hetherington Group

Shutting Down America's Largest Illicit Online Gift Card Marketplace

Organized retail crime is on the rise, affecting both the retail and financial industries. In a landmark case titled Operation Bad Bot, Homeland Security Investigations (HSI) unraveled a complex, online gift card fraud scheme, culminating in the shutdown of a marketplace with more than $22 million in stolen gift cards and the arrest and prosecution of the Canadian man behind the scheme. In this webinar, you will take a deep dive into Operation Bad Bot, learn how HSI solved this case, and hear how HSI worked with the U.S. Department of Justice to prosecute the perpetrator.

Presented by:
Dariush Vollenweider, Group Supervisor, U.S. Department of Homeland Security
Alan Stevens, Assistant U.S. Attorney, U.S. Department of Justice

NW3C does not share webinar attendees personally identifiable information with any third party without opt-in consent given during registration.

The content, views, and opinions expressed in this presentation are those of the individual presenters and do not represent official policy, opinions, or view of NW3C.

Lunch and Learn with Binance, Roblox, and Kodex

Join us for the Learn and Lunch webinar series, where legal experts from Binance, the worlds largest cryptocurrency exchange, and Roblox, a popular gaming platform, come together to provide valuable insights for professionals navigating the intersection of law enforcement and digital platforms.

The presentation will cover two key areas. First, experts from Binance will provide crucial updates on cryptocurrency investigations, including best practices for handling crypto-related legal processes and the latest market changes that could impact your work. As cryptocurrency continues to play a growing role in digital investigations, understanding these evolving legal frameworks is essential for law enforcement and legal professionals. Next, experts from Roblox will guide attendees through the platforms key safety features, explaining how law enforcement can effectively engage with Roblox. The session will also include a walkthrough on submitting information requests to Roblox, focusing on data availability, retention policies, and the primary identifiers needed to locate requested data. This section aims to equip attendees with practical tools to navigate Roblox's legal processes efficiently.

Throughout the webinar, participants will have the opportunity to hear directly from experts, ask questions, and share ideas for improving legal procedures within these dynamic industries. The event will conclude with an interactive Q&A session, allowing attendees to engage in a collaborative dialogue with industry leaders. Do not miss this chance to enhance your understanding of cryptocurrency investigations and digital platform legal processes.

Presented by:
Jarek Jakubcek, Head of LE Training, Binance
AJ Iafrate, Government Relations North America, Kodex Global

IA101 Foundations of Intelligence Analysis Training

This course addresses the critical need for well-trained intelligence analysts to interpret growing amounts of information. Topics include the intelligence cycle, analytical thinking skills, the importance of strategic analysis, communication and social media analysis, recommendation development, and legal and ethical issues. Students work hands-on with specialized software to synthesize information and develop various products of intelligence. The course was developed by a consortium that included NW3C, Law Enforcement Intelligence Units (LEIU), the International Association of Law Enforcement Intelligence Analysis (IALEIA), and the Regional Information Sharing System (RISS).

*Analysis basics. History and purpose of intelligence analysis. Legal issues and ethics. Sources of information. The intelligence cycle.
*Types of analysis. Crime patterns. Associations. Flow. Communications. Financial analysis.
*Creative and critical thinking. Brainstorming. Mind mapping. Steps to critical thinking.
*Deterring crime. Strategic analysis as a tool for law enforcement personnel.
*Hands-on experience. Work as part of a team to analyze information pertaining to several hypothetical cases.

FC122 Intellectual Property Theft Training

This course introduces the problem of intellectual property theft and provides tools, techniques, and resources for investigating and prosecuting these crimes. A combination of lecture, discussion, and interactive exercises illustrates the potential dangers and economic repercussions of counterfeit products, as well as best practices and techniques for investigating IP theft. Students are provided with a state-specific folder that includes relevant statutes, sample organizational documents for IP investigations, and additional resources for investigators and prosecutors.

This course is presented in collaboration with the National Association of Attorneys General (NAAG).
Awareness. Types of IP crimes. The criminals who commit these crimes. Impacts and dangers.
Investigation. Online and traditional techniques. Working with brand experts and the private sector. Large amounts of evidence. Resources.
Statutes. Prosecutorial theories. State-specific discussion.
Hands-on experience. Work with real counterfeit products. Identify fakes with expert guidance.

CI130 Basic Cyber Investigations: Cellular Records Analysis

This course is for officers, investigators, and analysts who encounter cell phone evidence that includes information external to the phone. Class concepts include instruction on how to request, read, and analyze call detail records from cellular providers; and how to plot cellular site locations to determine the approximate position of a suspect during a given period. No special hardware or software is required. However, this course focuses heavily on analysis; as such, a strong working knowledge of Microsoft Excel is highly recommended. Students are provided with a free copy of NW3Cs PerpHound tool, which assists in the plotting of call detail record locations.

*Cellular technology. Land-line and cellular networks. Types and generations of cell phones. Cell site design and its implications for law enforcement.
*Analysis of call detail records. Request information from service providers. Convert records into a useful format. *Merge two related spreadsheets. Read and analyze using filters, sorting, and pivot tables. Plot location information.
*Hands-on experience. Hands-on experience with NW3Cs free software tool PerpHound and Microsoft Excel to analyze various types of records that are available from cellular providers.

IA200 Intermediate Analytic Techniques

This course addresses key objectives focused on training intelligence analysts working at or towards the intermediate-level (practitioner and/or experienced analyst). This course expands upon core analytic fundamentals covered in NW3C's FIAT, ISIA, and IWAB offerings. The course begins with an in-depth case study to illustrate the complexities and challenges of a major case scenario for intelligence analysts. The course then examines key concepts related to analytic thinking, cognitive biases, structured analytic techniques, and effective time and project management. Finally, the course concludes with a section on addressing analytic uncertainty in intelligence writing. With guidance from experienced experts, students gain hands-on experience in the course with a complex practical case scenario that will challenge students on both days of the course.

Key concepts covered in this course include:
*Identifying cognitive biases
*Structured analytic techniques
*Project and time management
*Conveying uncertainty in intelligence writing

Subscribe to Justice Information Sharing