Provides concrete examples of covert electronic communication techniques for those who truly need protection, as well as those who investigate cybercriminals
Chapter 1. Laying the Foundation of Covert Communications
Chapter 2. The Tor Browser
Chapter 3. Triaging Mobile Evidence
Chapter 4. Mobile Extraction Issues
Chapter 5. Data Hiding
Chapter 6. Cryptography and Encryption
Chapter 7. Antiforensics
Chapter 8. Electronic Intercepts
Chapter 9. Digital Identity
Chapter 10. Putting It All Together
Chapter 11. Closing Thoughts
Brett Shavers is a former law enforcement officer of a municipal
police department. He has been an investigator assigned to state
and federal task forces. Besides working many specialty positions,
Brett was the first digital forensics examiner at his police
department, attended over 2000 hours of forensic training courses
across the country, collected more than a few certifications along
the way, and set up the department’s first digital forensics lab in
a small, cluttered storage closet. John Bair is currently employed
as a detective with the Tacoma Police Department. He has been
commissioned as a law enforcement officer since May 1989. During
his assignment in the homicide unit he began specializing in Cell
Phone Forensics.
In 2006 John created the current forensic lab that focuses on
mobile evidence related to violent crimes. His case experience
shortly thereafter gained the attention of Mobile Forensics
Incorporated (MFI) where he was hired and spent several years
serving as a contract instructor. MFI soon merged with AccessData
to become the only training vendor for their mobile forensics core.
This relationship fostered direct contact with engineers who assist
in criminal cases which need anomalies and exploits addressed
within their forensics products.
July 2013 he was hired as a contract instructor by Fox Valley
Technical College to assist in training for the Department Of
Justice - Amber Alert Program. His expertize with mobile forensics
is being utilized to structure a digital evidence module for
investigators responding to scenes where children had been
abducted. The program promotes how to prevent mobile evidence
contamination and how to triage live devices under exigent
circumstances.
Within in Pierce County, he began a mobile forensics training
program for Superior Court Prosecutors and Judicial Officers which
is currently in its fourth year. The program stresses the technical
origins of the warrant language, what to check for, validation of
evidence and how to present this dynamic content in court.
In December 2013, Detective Bair gave a presentation to the
University Of Washington Tacoma (UWT) Institute of Technology which
provided an outline to merge digital solutions between the Tacoma
Police Department and UWT. The relationship will focus on building
a digital forensic lab that will be modeled after the Marshall
University Forensic Science Center in West Virginia. The lab
proposal also includes the ability to conduct advanced destructive
forensics which will be a one of kind facility on the west coast.
Based upon the proposal to create a combined lab, John created a
mobile forensic course and began part time lecturing at UWT in
April 2014. The course covers legal concepts, logical, physical
searching methods and manual “carving. John authored his own
student and lab manuals for these courses. In March 2015, John
started an intern program within the lab at the Tacoma Police which
involved students from this program. In late August 2015, one of
the interns was able to use advance python writing to assist with
parsing over 3300 deleted messages in a homicide that took place
earlier that year.
John Bair has instructed at various federal labs within the United
States (Secret Service, ICE). He has presented on mobile evidence
as a guest speaker at Paraben’s Innovative Conference, Washington
State Association of Prosecuting Attorney’s (WAPA) Summit, and the
Computer Technology Investigations Network Digital Forensics
Conference. Recently he spoke at the 16th Annual Conference on
Information Technology Education / 4th Annual Research in IT
Conference in Chicago Illinois. These conferences are sponsored by
the ACM Special Interest Group for Information Technology Education
(SIGITE). John and two other professors from the University Of
Washington – Tacoma (UWT) recently co-authored a paper regarding
the current Mobile Forensic Program.
John has over 42 certifications related to digital evidence
training. The following reflect the most significant related to
mobile forensics: Mobile Forensics Certified Examiner (MFCE),
Cellebrite Certified Mobile Examiner (CCME), Cellebrite Certified
Physical Analyst (CCPA), Cellebrite Certified Logical Operator
(CCLO), AccessData Certified Examiner (ACE), Cellebrite Mobile
Forensics Fundamentals (CMFF), AccessData Mobile Examiner (AME),
and Cellebrite Certified Task Instructor.
John is also the co-owner of the forensics expert services firm,
NAND Forensics (www.nandforensics.com).
Ask a Question About this Product More... |