The following descriptions describe the various courses offered by the HARCFL.
Case Agent Investigative Review (CAIR):
This course teaches investigators and case agents how to safely browse, search, and save digital evidence of value for inclusion in an interactive report using the Forensic Toolkit. The CAIR tool enables state and local investigators to review the HARCFL’s findings in the convenience of their own offices.
CAIR was designed to aid in the advancement of a case agent's investigation, setting leads, establishing probable cause for search and/or arrest warrants, and testifying at preliminary hearings, etc. Additionally, prosecutors along with HARCFL Examiners can use this tool to review and discus digital evidence with investigators for trial preparation and other purposes.
Note: Attendees that successfully complete this class are eligible to receive 8 hours of Missouri POST certified continuing education requirements.
Seizing and Handling of Digital Evidence
Investigators learn how to collect and preserve digital evidence, and to integrate digital evidence into a case. Additionally, investigators are exposed to the advanced tools and techniques used by the RCFL, so they can better understand what to expect from a forensics examination. This course requires no prerequisites, but attendees should have a working knowledge of computers.
Seizing and Handling of Digital Evidence for Law Enforcement Executives (Lieutenant and above)
The goal of this training is to provide law enforcement executives with the information necessary to identify, access, and address their agency's digital evidence needs. They will also gain the technical knowledge that will allow today's police executive to adapt and understand these dramatic changes. Digital technologies are rapidly being applied to all areas of law enforcement. This course will provide a survey of digital evidence and computer forensics, evidence handling challenges, legal issues with digital evidence, imaging technologies, processing technologies, digital video technologies, encryption, and review technologies. This course is taught in a forensic laboratory, devoted solely to the examination of digital evidence in support of criminal investigations. The RCFL specializes in cases involving terrorism, crimes of violence, theft or destruction of intellectual property, internet crimes and child pornography, and fraud.
The FBI's Computer Analysis Response Team (CART) developed the ImageScan system to help investigators locate the presence of picture files that may contain contraband on a computer. This system allows the investigator to view a variety of graphic formats during a consensual search, and protects valuable digital evidence by booting up a computer using the Linux operating system. After mounting the hard drive in a “read only” manner, ImageScan prompts the investigator to search for picture files only. During this process, the tool logs every step taken by the investigator, further documenting what occurred during the search process.
Law enforcement personnel that conduct on-site investigations for child pornography are encouraged to take the ImageScan training.
Basic Internet Investigations
This course is designed as a basic introduction to conducting investigations on crimes conducted via the internet. The course is geared to the street level police officer or deputy as well as general detectives. Topics include IP address tracking, writing search warrants and subpoenas, social networking sites, cyberstalking, and cell phone offenses including "sexting". The course will conclude with a practical exercise. Taught by investigators with the WESTERN MISSOURI CYBER CRIMES TASK FORCE.