Investigative Techniques Using Social Networking Sites

Course Information

Capturing live digital evidence from social networks sites (YouTube, MySpace and Facebook), computers and computer networks using Internet tools, linux previewing utilities and software

applications

This PATCtechtraining module targets three essential and unique elements associated with the investigation and recovery of digital evidence. Registration for this training module does not require an advanced understanding of computer related skills, and is designed for all parties directly involved in crime scene procedures, evidence preservation and criminal investigations.

* NOTE: A PC based laptop is useful for the course; however, it is not required for successful completion.

Course Purpose / Objectives

At the conclusion of the course, the investigator will:

Social Networking: This portion of the class is designed for detectives, school resource officers, and anyone involved in conducting investigations involving social networking sites for the purpose of administrative or criminal investigations.

Primary Topics for this section of the course include the following:

Introduction to the various Social Networking sites including Facebook, MySpace and others;

Steps to preserving a social networking profile; Determining the identity of a profile's creator; Steps to set up an undercover profile; How to use an undercover profile for information gathering; How to use available tools that aid in the investigation of social networking profiles; Artifacts that Social Networking sites leave on a computer system.

Linux Previewing Utilities: This portion of the class is designed for the first responder, probation or parole officer, or any other person with a need to preview a live computer on scene without changing important information on the computer system.

Primary Topics for this section of the course include the following:

Introduction to several different types of Live Linux CDs available for previewing a running computer system;

Proper use of each of the Live Linux CDs on a running computer system; How to conduct a targeted search for pictures, videos, documents and other types of

digital evidence; How to copy the contents of the computer's RAM on a live machine.

Network Seizure: This portion of the class is designed for the first responder, raid team leader, or any other person with the responsibility of conducting search warrants on networks in a home or commercial setting.

Primary Topics for this section of the course include the following:

The different types of networks that one can anticipate encountering, including simple home networks to large business networks;

Descriptions and functions of different types of network hardware; Proper shut down procedures for network hardware; Obtaining evidence from servers; Identifying and locating network attached storage; Conducting analysis of routers on scene.

Instructor

Donald Lucas

Donald Lucas has been a state law enforcement officer since 1994. He spent ten years as a criminal investigator for his agency before joining the Computer Crime Unit, and has investigated and successfully prosecuted crimes ranging from identity theft to child pornography to criminal homicide. As a computer forensic examiner, he assists members of his agency, as well as officers from other local, state and federal agencies, with computer related crimes, as well as performing pro-active investigations into child luring and the sharing of child pornography over the internet.

Donald has testified in state and federal proceedings, and has received training in computer

crime and computer forensics from numerous state, local and federal agencies and organizations. Additionally, he has been invited to speak to state and local law enforcement agencies, crime victims service organizations, school districts, and human service agencies.

Dates:

5/31/2012 -6/1/2012

Location:

Columbus, Ohio Division of Police Training Academy - 1000 North Hague Ave., Columbus, OH 43204-2121

Course Contact / Registration

Officer Stephanie Gibson (O) 645 4800, ext 1116 (e-mail): slgibson@columbuspolice.org For consideration to receive a seat in this class, fill out the attached registration form and return to the course contact.

Columbus Division of Police Training Course Registration Form

Columbus Regional Training Academy

Building Strong Minds, Strong Tactics and Strong Values

INSTRUCTIONS: Complete this form and send through departmental mail to “Stephanie Gibson / Advanced Training or fax to 645-4246

Name: Last First M.I. Badge/IBM/Tech #:

Assignment:

Shift: Days Off :

Course: Investigative Techniques Using Social Networking Sites

Date: 5/31/2012 -6/1/2012

Time: 8:00A-4:00PM

I am interested in attending this course because:

Career Advancement

I am an FTO My assignment requires specialized training

Employee Signature:

Date:

I have read and understand the registration/cancellation policies and procedures for reserving a seat in

this class.

Supervisor Name (Please print.): Supervisor Signature: Assignment: Telephone #:

Date:

Supervisor signature indicates knowledge that this registration form will be submitted to Advanced Training Section for processing. A supervisor’s signature represents approval for this employee to attend the course.

Registration forms sent by fax should not be mailed. Your confirmation notice will be emailed.

Questions -- Call or contact the Advanced Training Section

Officer Stephanie Gibson, Advanced Training Administrative Unit, 645 4800, ext 1116