Seizing and Handling of Digital Evidence (formerly Bag and Tag)

• This one-day course designed for investigators that cringed at the thought of doing anything with computers and it also offers investigators a practical experience and exposure to a myriad of different types of digital evidence that they are likely to observe in the course of serving a search warrant. This course prepares investigators for taking apart computer systems, documenting configuration, itemizing evidence items, safe packaging and proper transportation of digital evidence to their evidence facility and ultimately to the RCFL or a forensic lab for examination. Not available to outside law enforcement at this time.
• Registration is mandatory.

Forensic Tool Kit for Investigators

• FTK is one of several tools that the SDRCFL uses while conducting digital forensics examinations. This course teaches investigators how to use FTK so they can conduct a comprehensive review of the digital media that has been submitted to, or processed by the SDRCFL. This course also teaches investigators how to locate and examine e-mail messages, deleted files, documents, graphic files, and how to search for key words and phrases.
• This course is restricted to law enforcement investigators.
• Registration is mandatory.

Image Scan Training

• Free Training - Open to all law enforcement personnel. Image Scan is a component system developed by the FBI CART Unix Program for Innocent Images field investigators to accurately view a variety of graphics formats on a subject's computer. Image Scan uses a customized linux boot CD/floppy combination in conjunction with a mass storage USB device that allows investigators in the field to access the graphics files on a subject's computer while making absolutely no changes to any files. As used for consent searches, this system maintains the forensic integrity of the computer viewed for subsequent forensic examination in a lab environment.
• Registration is mandatory.

Image Scan Checklist

• * If you and your agency conduct on-site investigations for child pornography and have a need for Image Scan, download the attached document, "Sample Letter" and have your agency head or division commander send the letter to the address listed at FBI CART Headquarters. Also fax the letter to the Program Manager at the number listed. If you have any other questions, please contact the NJRCFL. Download a sample letter here.

Drive Quest Training

This is a one-day class that provides hands-on training using the FBI Computer Analysis Response Team's newest preview tool. Drive Quest helps law enforcement officers preview computers of interest during an investigation and identify those that should be submitted for a full forensic examination in a laboratory environment. Investigators use the tool to search for and view numerous types of files (documents, spreadsheets, email, web pages, graphics, videos, etc.) on a subject's computer while making absolutely no changes to any files. Automated reports are generated for viewing some system information. Registry information, and Internet history. Also, users can select from predefined keyword lists or use their own keywords to search for files of interstate and then store selected results on a thumb drive for later viewing. Drive Quest uses customized Linux boo DVD that maintain the forensic integrity of the previewed computer. Intended for investigators with intermediate-level knowledge of computers. A Drive Quest DVD and USB device are provided free to all who successfully complete the class.

• Registration is mandatory.
• Prerequisite: Image Scan Training

Drive Quest Checklist

Cell Phone KIOSK (CPIK) Training

• This is a half-day course which will give an overview of a digital preview solutions to help investigators get the results they need Now.
• Allows users to extract data from a cell phone, put it into a report, and burn the report to a CD or DVD in as little as 30 minutes

DVR Best Practices

• Teaching detectives (first responders) how to deal with DVRs and captured video on them.
• Best Practices for the retrieval of video evidence from DVRs.
• ****** OPEN TO ALL LAW ENFORCEMENT ******