Public Safety Technology Training

Overview

Gives officers a common language for devices, operating systems, and cloud accounts while reinforcing cyber hygiene habits.

Audience & Prerequisites

• Newer officers or supervisors who need tech context.
• No prerequisites beyond basic computer familiarity.

Modules

• Devices & OS: Laptops, phones, tablets; file paths, screenshots, and permissions.
• Cloud vs. Local: Accounts, syncing, offline copies, and where evidence lives.
• File Types & Storage: Common file extensions and why they matter.
• Cyber Hygiene: Phishing cues, MFA basics, and password do/don’t for officers.

Overview

Translates networking jargon into practical cues, router checks, and ISP responses.

Audience & Prerequisites

• Officers reviewing reports with IPs or router logs.
• Basic comfort with devices; literacy module recommended.

Modules

• IP Fundamentals: Public vs. private, IPv4/IPv6, and geolocation caveats.
• NAT & DHCP: Home routers, lease times, and how many devices share an IP.
• VPN & Proxies: What they hide, what they don’t, and investigative next steps.
• Logs & Timestamps: Reading router/ISP outputs and time zone alignment.

Overview

Shows how DNS records and passive DNS can connect domains, apps, and infrastructure to investigative leads.

Audience & Prerequisites

• Investigators working web cases or reviewing threat intel.
• Networking basics helpful but not required.

Modules

• DNS Flow: Resolvers, caching, and common error codes.
• WHOIS & Hosting: Registrars, privacy guards, and hosting clues.
• Passive DNS: Historical lookups, subdomain pivoting, and timelines.
• Applied Scenarios: Suspicious domain on a school device; mapping domains to IPs.

Overview

Helps officers read digital footprints without overclaiming-linking actions to devices with caution.

Audience & Prerequisites

• Any officer interpreting web or app data in reports.
• Networking module recommended for timestamps/IPs.

Modules

• Browser & Device Data: History, cookies, auth tokens, and sign-in indicators.
• Server/API Logs: Common fields (IP, user agent, status codes) and how to read them.
• Mobile & App Logs: Push tokens, device IDs, and retention reminders.
• Timeline Building: Time zones, NTP drift, and pairing logs with statements.

Overview

Provides step-by-step seizure and preservation checklists that protect evidence integrity.

Audience & Prerequisites

• Officers serving warrants or first on-scene with devices.
• No prior forensic training required.

Modules

• Seizure Decisions: Power down vs. isolate; Faraday basics; avoiding remote wipes.
• Chain of Custody: Labels, photos, hashes, and signature flows.
• Imaging vs. Live: When to image, when to preserve RAM/volatile data.
• Integrity Checks: Hashing files and reading timestamps without altering them.

Overview

Clarifies what metadata exists, how long it lasts, and how to ask for it without overpromising contents.

Audience & Prerequisites

• Investigators preparing preservation or production requests.
• Works standalone; networking context helpful.

Modules

• SMS vs. App Data: Carriers, iMessage/WhatsApp/Signal differences, and metadata limits.
• Email Headers: IP hints, user agents, routing fields, and timezone alignment.
• Metadata Lifespans: Retention windows and rapid-preservation steps.
• Sample Language: Request templates and caveats to avoid overreach.

Overview

Builds a minimal playbook so officers keep cases and personal accounts safer while operating in the field.

Audience & Prerequisites

• All officers; ideal as onboarding or annual refresher.
• No prerequisites.

Modules

• Phishing & Social Engineering: Quick tell-tales and what to report.
• Passwords & MFA: Patterns to avoid, passphrases, and MFA prioritization.
• Device Hygiene: Updates, screen locks, and separating personal vs. case data.
• Secure Comms: Choosing channels for sensitive case discussions.