Training Courses

Digital Evidence Processing

Investigators learn how to collect and preserve digital evidence, and to integrate digital evidence into a case. Additionally, investigators are exposed to the advanced tools and techniques used by the SVRCFL, so they can better understand what to expect from a forensics examination. This course requires no prerequisites, but attendees should have a working knowledge of computers.

Image Scanning Software Usage

The Federal Bureau of Investigation’s (FBI) Computer Analysis Response Team (CART) developed the Image Scan system to help investigators locate the presence of picture files that may contain contraband on a computer. This system allows the investigator to view a variety of graphic formats during a consensual search, and protects valuable digital evidence by booting up a computer using the Linux operating system. After mounting the hard drive in a “read only” manner, Image Scan prompts the investigator to search for picture files only. During this process, the tool logs every step taken by the investigator, further documenting what occurred during the search process.

Students should be currently assigned to a unit that has the responsibility for conducting child exploitation or computer investigations. Students should have an above average degree of computer knowledge, to include attaching devices, inserting media, windows-type navigation skills and a general understanding of how computers work.

Access Data's Forensic Toolkit (FTK) for Investigators 1-Day

FTK is one of the tools that the Silicon Valley RCFL uses in computer forensic examinations. We believe that the case investigator is the most knowledgeable person to conduct an analysis of digital media to determine its relevance to an investigation. For example, who better to determine that a particular e-mail between two individuals is relevant?

This course provides students with the knowledge and skills necessary to effectively use FTK to conduct a comprehensive review of digital media that has been submitted to and processed by the SVRCFL. This includes techniques to locate and examine e-mail messages, deleted files, documents, graphic files, as well as searching for key words and phrases.