Training Courses

Case Agent Investigative Review (CAIR)

Forensic Tool Kit (FTK) is one of several tools that the San Diego RCFL uses while conducting digital forensics examinations. This one day course teaches investigators how to use FTK so they can conduct a comprehensive review of the digital media that has been submitted to, or processed by the San Diego RCFL. This course also teaches investigators how to locate and examine e-mail messages, deleted files, documents, graphic files, and how to search for key words and phrases.


Cell Phone Investigations

The Cell Phone Investigations Course is designed for the first responder and investigators. This 1-day course offers hands-on operation of the UFED Touch, exposes students to logical extraction and data analysis. Students can expect to perform a number of hands-on logical extractions on various mobile devices with a variety of operating systems. Participants also create reports on findings and are exposed to the free UFED Reader and how to use that to multiply investigative efforts. Learn and share knowledge about iPhone, Android, and other smart phones.


DCCTV Data Recovery Training

DCCTV Data Recovery Training is designed for the first responder and investigator. This 1-day course is for RCFL clients and provides instruction on the capture and preservation of Digital Closed Circuit Television video. Instruction includes background on DCCTV systems and their components, trouble-shooting suggestions, and technical support offered by the RCFL. The course will be primarily hands-on training giving you the tools, knowledge and confidence to export digital video and still images from most any DCCTV system. A kit will be provided for assisting you in capturing digital video in the field, enabling you to be a resource for your agency.


On Scene Triage (Image Scan / Drive Quest)

The FBI's Computer Analysis Response Team (CART) developed the Image Scan system to help investigators locate the presence of picture files that may contain contraband on a computer. This system allows the investigator to view a variety of graphic formats during a consensual search, and protects valuable digital evidence by booting up a computer using the Linux operating system. After mounting the hard drive in a “read only” manner, Image Scan prompts the investigator to search for picture files only. Drive Quest allows the investigator to view most common files. During this process, the tools log every step taken by the investigator, further documenting what occurred during the search process.

Law enforcement personnel that conduct on-site investigations for child pornography are encouraged to take the On Scene Triage training.


Introduction to the Regional Computer Forensics Laboratory

Investigators are introduced to the San Diego RCFL's vast array of services offered to the law enforcement community. In this one day class, the San Diego RCFL will provide a short introduction to Case Agent Investigative Review (CAIR), DCCTV Data Recovery, Seizing and Handling of Digital Evidence (SHDE), Cell Phone Investigations, and the Loose Media Kiosk (LMK). A short tour of the facilities will also be provided.