Social Networks Investigations (CSNI)

Description

Cellebrite Social Networks Investigations (CSNI) is a four (4) day entry level course designed for technically aware investigators, digital evidence analysts, and forensic practitioners. This course provides students with an introduction to social media investigations to include pre-seizure actions and basic investigative techniques. Students will learn how to create undercover accounts and use open source intelligence to gather information from publicly available information from social networks such as Facebook, Twitter, Periscope, and more.

RESTRICTED TO LAW ENFORCEMENT AND PROSECUTORS ONLY

Course Content:

Social Media Basics

• Definitions of social media
• Popular social media networks and applications
• Popular online ad services
• Usefulness of social media networks.

Undercover Accounts

• Introduction to resources, and tools used for undercover social media investigations
• Loading prepaid minutes
• Integrating undercover accounts
• Downloading social media network applications.

Undercover Smart Phone

• Activating an undercover smartphone
• Loading prepaid minutes
• Integrating undercover accounts
• Downloading social media network applications.

Entrapment

• Definitions of entrapment and predisposition
• Identifying ongoing patterns of conduct
• Proper undercover pace and tone
• Examples of entrapment.

Undercover Device Evidence

• Necessity of proper evidence extraction
• Identifying evidence unique to the device
• Identifying evidence that may exist on offsite servers
• Benefits of using UFED Cloud to supplement a device extraction.

Open Source Intelligence

• Manual web-based searches
• Third-party search engines
• Email and Cellular queries
• Darkweb and TOR.

Consensual Account Reviews

• Necessity of proper evidence extraction
• Identifying evidence unique to the device vs server
• UFED overview
• Benefits of using UFED Cloud to supplement a device extraction.

Social Media Data & Legal Process

• The Electronic Communications Privacy Act (ECPA)
• Categories of stored data and provider retention rates
• User notification policies by Internet Service Providers (ISPs)
• Law Enforcement Portals and legal process submission.

Subpoenas

• Definition of subscriber data
• Use and drafting of subpoenas
• Requirements and authority of subpoenas
• Practical exercise issuing a proper subpoena.

Transactional Data

• Definition of transactional data
• Use and drafting of court orders
• Requirements and authority of court orders
• Examples of assorted court orders.

Stored Content & Communications

• Definition of content and communications
• Use and drafting of social network or cloud search warrants
• Requirements and authority of search warrants
• Examples of assorted social network and cloud search warrants.

Investigations Involving Exigency & Children

• Definition and examples of exigency
• Obtaining social media data under exigent circumstances
• The National Center for Missing and Exploited Children
• Resources for intelligence and analytical assistance during emergencies.

View CSNI Course Details

Find a CSNI Class

Datasheets

Video

Categories