Computer Forensics

Computer Crime Investigation Workshop

This course can be modified to the level of expertise in the audience and can be adapted in the classroom for multiple levels of experience and understanding. It is designed as a “hands-on” workshop designed to develop applicable skills in the area of computer crimes, including detection, investigation, analysis, recovery and protection of networks. Students will develop abilities in the procedures of computer related intrusion, theft, unauthorized examination, and sexual related exploitation.

Training Goals and Objectives

The goal of the training program is to prepare and condition law enforcement officers in an extensive practical computer forensic learning workshop designed to provide skills related to internet technology, investigative tactics, forensic evidence analysis, and network security for corporate security.

Training Audience, Format and Content

This is an intermediate / advanced skill development course designed for the Forensic Crime Scene, Evidence Collection Personnel, Criminal Investigators and elite corporate network security professionals interested in learning enhanced skills related to identification, collection, preservation and investigation of forensic computer crimes and exploitation.

This course is most successful when taught and received with audiences of 25 officers or fewer, but has been given in groups of 30 or more with successful reviews. The smaller groups enables students a more direct dialog & contact with the instructors and the other students.

The course is designed in five (5) day sessions with each day involving the exploration of a different topic and the reinforcement of previous learned material. The course is generally designed to run from 0800 to 1600 hours daily, but can be manipulated for evenings and extended days as needed.

Daily content and course schedule/agenda:

Note: Students will be engaged in over 60% of hands on training during each day of instruction. The instructor will lead each day in the topical instruction, and then implement related practicum simulations at the student’s workstations.

Day One:

· Introduction to Computer Hardware / Software

· Internet Technology

- Personnel / Corporate Investigative Tactics for Civil and Criminal Prosecution

Day Two:

· Forensic Evidence Analysis of Hardware and Software Components

· Operating System Artifacts

Day Three:

· Suspect Identification - Patterns and Indicia

· Internet Access and Communication

· Hidden Secrets

Day Four:

· Daily Review

· Network Hardware, Configuration, Security and Methodology

· Case Preparation, Legal Issues, Prosecution and Expert Witnesses

Day Five:

· Law Enforcement Investigation and Expectations

· Written / Practical Examinations

· Certificates and close

Prerequisites: Students must possess basic computer skills knowledge and be able to conduct computer related file and internet searches.

Maximum Enrollment: 25

Student Evaluation

Each workshop will consist of participants developing computer forensic knowledge and skills in a self contained and controlled training environment. This environment will provide students with the ability to demonstrate their ability to meet the minimum requirements of each learning component provided by the instructor.

Practical application testing / evaluations in these areas will be required by participants to obtain a certificate of completion. Additionally, written examination requirements can be provided upon request.

Limitations / Special Instructor Needs:

Any audio/visual or POSTC/Academy facility or staff needs will be addressed on a case-by-case basis, but might include the use of an electronic projection unit, VCR, audio or marker board materials.

· Networked Desktop PC / Notebook w/ CD Rom (CD-RW / DVD)

· Unfettered Web Access

· Dedicated Server

· Ability to create training simulations involving infiltration, chat, encryption, etc

Police Officer Standards and Training Requirements

This program has met the rigorous standards of several POST / POSTC certifying authorities in: California

Student Materials

Depending on student understanding, a wide range of video, audio and PowerPoint presentations will be used in the training session, and the instructors will come prepared with everything they will need to make this an informative, fast-paced learning experience. The materials will range from commercially driven video, personal case studies of the instructors, and detailed hands on training exercises.

Each student will receive a copy of the manual “Computer Crimes Investigation” for use with this course of instruction. Due to publishing restrictions, these training materials are not enclosed for review

Student needs / Requirements

Laptop / Desktop Workstations
Unfettered internet access connection
Dedicated Server
IT Support (on-call)