Internet Investigation Tradecraft
A comprehensive 3 Day Workshop designed to give delegates the skills and knowledge required to perform an Internet Investigation or Intelligence Operation
The ability to identify and retrieve relevant and timely information, intelligence or evidence from the Internet and Open Sources has become a routine necessity for Investigators. However, the structure and size of the Internet presents many challenges for Researchers, Analysts and Investigators. A lack of understanding about the nature and workings of the Internet can mean intelligence or evidence opportunities being lost, or investigations compromised. This workshop examines those challenges and builds a framework skill set to enhance Investigations and Intelligence Operations.
This course includes;
• Internet Investigation Basics - Defining Topics; Forming Strategies; Search Engines; Directories; Virtual Libraries; Meta/Federated Search; Preferences/Settings; Boolean Operators; Results; Advanced Search.
• Internet Footprints & Compromise Issues - Webmaster Logs; Search Engine; Parallel Surfing; Adverts & Images; Sharing Information; Affiliations; Social Networks.
• Alternate Personalities - Real World; Virtual World; Building a Back Story; Identity Management.
• Investigation Preparation - Browser/Workstation Preparation; Add-Ons; Useful Software; Evidencing Tools & Digital Signatures.
• Internet Work Station Environment - Role; Equipment; Risk Analysis; Workstation Access; Workstation Procedures.
• Covert / Anonymous Activity - Browser Privacy; Anonymous Browsing; The Dark Web; Anonymous Surfing.
• Search Tools & Strategies - Search Engines, News, Companies/Businesses; Land/Property; Blogs; Custom Searching; Archives; Images; Phone Numbers; E-Mail addresses; Maps.
• Legal Considerations - Deployment; HRA; RIPA; Surveillance; Interaction with People; Agent Provocateur; Interaction with Computers.
• Social Networking - Social Networks, Communication Methods; Mobile Devices, Keeping informed.
• Network Information - Domains; IP Addresses; DNS; Whois; Traceroute.
• Minimising Compromise - Connectivity; Equipment; Software; Geolocation; Behavioural Targeting; Browser Settings; Add-Ons.
• Evidencing - Saving Data; Moving Data; Notes; Production; Statement, etc.
This course also covers the following (not necessarily as an individual subject);
• Deep / Invisible Web - Finding it, Search Engine restrictions, Spiders, Web Master options.
• International Information - Country Profiles, Governments, News, NGO's, etc.
• Communication - E-Mail/Webmail, Newsgroups, Discussion Forums, IRC.
• People Finders - Business, Credit Reference, Regulatory Authorities, Search Tools, etc.
• Monitoring the Internet - Passive, Active, Advanced concepts.
• Data Assimilation - Hunters, Extractors, Visualisation
This is a 'hands on' workshop, and delegates are expected to be familiar with the use of a computer, Office Software, the Internet, Browsers and basic use of a Search Engine.
About the Trainer:- Colin Ehren is an international Internet Investigation Consultant who works in association with a bespoke group of clients. His work encompasses Consultancy, Investigations, Capacity Building and Training. He also presents RISC's one-day OSINT Course, and is regarded as an authority on Internet Tradecraft and is a passionate speaker. Formerly, Colin was a Metropolitan Police Officer and upon retirement remains one of the UK's most experienced Internet Investigator's and Trainer's.