Connecting the Digital Dots

This three-day course is an intensive, hands-on practical training designed to provide participants with a systematic, step-by-step approach to conducting digital investigations.  The course will introduce organization and documentation methods for reviewing, analyzing digital evidence, and documenting evidence as it is received throughout an investigation from multiple sources (i.e., subpoenas, social media accounts, emails, digital search warrants, and cellular device extractions).  The primary focus is connecting individual pieces of digital evidence to develop a larger investigative picture and confirming the identity of your primary target.  Evidence will be introduced progressively, requiring students to analyze each new source in relation to information previously received. Students will maintain an evidence correlation method to identify and document connections between accounts, devices, identifiers, timestamps, communications, and other digital evidence.  This course is intended for students who have a basic understanding of digital forensic cases and investigative processes. Students should also have a basic working knowledge of computers, Microsoft Word, Microsoft Excel, social media platforms, and law enforcement report writing.  This course is primarily based on digital criminal investigations of child sexual abuse material (commonly referred to as child pornography), but the principles learned from this course will work for all digital criminal investigations.  No advanced programming or technical expertise is required.  All participants will be required to do analytic/examination reports.