Click for Service Request
San Diego RCFL
Click for Program Information Click for Operations Information Click for Training Information Click for News Information Click for Links Click to go to the home page Click for contact information

Course Descriptions

Forensic Tool Kit for Investigators (FTK01)

  • FTK is one of several tools that the SDRCFL uses while conducting digital forensics examinations. This course teaches investigators how to use FTK so they can conduct a comprehensive review of the digital media that has been submitted to, or processed by the SDRCFL. This course also teaches investigators how to locate and examine e-mail messages, deleted files, documents, graphic files, and how to search for key words and phrases.
  • Registration is mandatory. To view training dates for this course, visit our Training Schedule.

Image Scan Training (IMSCA)

The Federal Bureau of Investigation’s (FBI) Computer Analysis Response Team (CART) developed the Image Scan system to help investigators locate the presence of picture files that may contain contraband on a computer. This system allows the investigator to view a variety of graphic formats during a consensual search, and protects valuable digital evidence by booting up a computer using the Linux operating system. After mounting the hard drive in a “read only” manner, Image Scan prompts the investigator to search for picture files only. During this process, the tool logs every step taken by the investigator, further documenting what occurred during the search process.

A description of the actual Image Scan course follows—

  • This course provides instruction for the proper practical application of the Image Scan System by law enforcement personnel in the field on consent searches. Instruction includes an explanation of the technical background of the system and its components, trouble-shooting suggestions, and technical support offered by the Image Scan staff.
  • Students should be assigned to a unit that conducts child exploitation or computer investigations. Students should also have an above-average degree of computer knowledge and be familiar with attaching devices, inserting media, navigating Windows, and how computers operate.
  • Image Scan 2 CD-Rom, Image Scan boot floppy disk, blank formatted floppy disks, USB devices and cables are provided to every student that successfully completes the course. They should bring with them their government laptop/notebook computer and floppy drives, however, systems containing “Watchdog” are not permissible. If these devices are not available to a student – the SDRCFL will provide them the necessary equipment so they can complete the coursework. Students are given handouts to review the presentation portion of the course, including several Image Scan Preview Checklist sheets.

Registration is mandatory. To view the training dates for this course, visit our Training Schedule.

Introduction to MySpace.com and other Social Networking Websites (SPC08)

This POST certified presentation gives useful information to law enforcement personnel who need to know about MySpace.com and other social networking websites. Those attending will learn how to gain user access, what services are generally available within the websites and other tips and tricks to conduct investigation to conduct investigations and use social networking websites (primarily MySpace) as an investigative tool. This class will cover:

  • Definition and history of MySpace.com
  • Setting up a MySpace account - Requirements and lack of age verification
  • CraigsList.org - Explanation of website, posting to CraigsList
  • MySpace personal web pages examples
  • Components of MySpace
  • Other social networking sites
  • MySpace as an investigative Tool - The various methods to search MySpace for information
  • MySpace LEO Guide, record retention periods
  • Partential Resources

This class is limited to 21 students.

**Do NOT register for this class until you are confirmed by the instructor.** Send an e-mail to myspaceregistration@catchteam.org. Once the instructor notifies you that you were selected return to this site to register.

The Seizing and Handling of Digital Evidence (SHDE)

This class covers the following topics—

  • Recognizing digital evidence
  • How to recognize different operating system
  • How to shut down personal computers while preserving evidence
  • When to call for help
  • Who to call

Registration is mandatory. To view training dates for this course, visit our Training Schedule.

Internet Crimes & Tracing

Presented by the C.A.T.C.H. High Tech Crimes Task Force & the Regional Computer Forensics Laboratory.

This class covers the following topics—

  • Overview of the Internet
    —  Discussion of issues and people involved
  • Internet Configuration
    —  What it is
    —  How it works
    —  Getting around on it
  • E-mail & Internet Chat
    —  Reading e-mail extended message headers
    —  How to track and trace suspects
  • Legal
    —  High tech search warrants & preservation letters
    —  Law related to high tech crimes
  • Investigative Tools
    —  How to use them
    —  Where to get them

Each student will receive a resource CD containing tools, information and examples. This class is offered free of charge to law enforcement officers/investigators and prosecutors only

Class sizes are limited to 21 students. Registration is required and done by e-mail only. Inquiries or registration: please e-mail Inv. Dave Hendron dhendron@catchteam.org. You must register via e-mail and receive a confirmation. You will receive updated instructions via e-mail. There are no walk-in registrations, and no student substitutions. This class is restricted to sworn law enforcement officers and prosecutors only.

N-DEx Class Description

ARJIS is offering a 4 hour class to introduce users to the new Law Enforcement National Data Exchange (N-DEx) system. N-DEx is a powerful automated investigative tool that will provide Law Enforcement Agencies with the ability to search, link, analyze, and share criminal justice information such as incident/case reports, incarceration data, and probation/parole data on a national basis. The San Diego region is in the first incremental roll-out scheduled for March 2008.

The initial agencies participating are:

  • Los Angeles Police & Sheriff’s Department
  • ARIES (48 agencies in Alameda and Contra Costa Counties in Northern California)
  • Local data from the states of Oregon, Texas, Nebraska and Delaware
  • Air Force Office of Special Investigations
  • FBI

N-DEx Increment II is scheduled for deployment in Summer of 2009 and Increment III is scheduled for deployment in Summer of 2010. During these deployments, more data sources and participating agencies will be added. Additional information regarding N-DEx can be found at the following website: http://www.fbi.gov/hq/cjisd/ndex/ndex_home.htm

The class is appropriate for officers, investigators, detectives, analysts and ATCs who would use data from other regions in California and from out of state.

The class will cover:

  • What is N-DEX? Overview of data sources and participating agencies
  • How to access N-DEX and account initiation
  • System Functionality
    —  Searching (person, crime characteristics, vehicle/property, location)
    —  Reporting
    —  Visualization

Registration is mandatory. To view training dates for this course, visit our Training Schedule.

Click here to view a list of local hotels.