Length: 5 Days; 40 hours
Designed For: Investigators seeking to enhance and apply their skills in identification and recovery of geolocation artifacts from mobile devices, analyzing cellular call detail records, and utilize related social media data to effectively solve cases and present findings in trial.
Prerequisites: Military and specific law enforcement officers (see below)
Requirements: Students are required to supply their own laptop or tablet.
**This class is limited to military students and to specific law enforcement students with the approval of the Director of Training. Law Enforcement students must be assigned investigative duties and be employed by a federal, state, or local agency with a jurisdiction of more than 1 million in population. Please contact RCTA Director of Training at tim@rcta.org for more information.**
Description: The course prepares the investigator to preserve, analyze and report geolocation evidence extracted from cellular call detail records, GPS enabled devices, mobile devices and social media. This will include the analysis or review of:
- First responder and on-scene digital evidence collection procedures
- Various carrier call detail and cellular tower records
- Modern mobile forensics software capabilities
- Cloud backups and data
- Social media activity
- GPS evidence
- Trial and testimony challenges
The investigators will be exposed to a variety of mobile device acquisition and forensics solutions with the focus on introducing the effectiveness of Oxygen Forensic Detective software.
Investigators will also use open source solutions and knowledge-based instruction to understanding and mapping Cellular Historical Data Reconstruction (CHDR). CHDR training is designed to teach investigators how to decipher subscriber call detail records (CDRs) from numerous carriers and utilize the respective geolocation information to assist in their investigation.
The course will define components of the cellular network, breakdown the various cellular carrier record formats, and introduce successful case and trial solutions.
This is a solutions driven course which will demonstrate how non-traditional techniques such as social media investigation, CHDR analysis and mobile device forensics can be used to solve traditional crimes including drug trafficking, murder and kidnapping. There will be an open forum during the course to discuss current investigations and you are encouraged to bring in any case evidence or case details if analysis assistance is desired
This is a hands-on solutions course with a minimal requirement of a laptop computer with Windows 7 operating system or newer.
Taught by Gus Dimetrelos, Cyber Forensics 360; Retired US Secret Service agent K. Gus Dimitrelos will introduce evidence from previous cases and provide practical exercises to challenge the investigator to correctly identify useful data in support of their criminal cases.