SDTMA FW: National Computer Forensics Institute Course Offerings for Fiscal Year 2022 (October - January)

Fri Jul 30 13:06:35 CDT 2021

Good Morning SDTMA!

Please see the Below list of training offered by the Secret Service.

Brooke Amash
Training Coordinator
San Diego County Probation
10111 Carroll Canyon Rd.
San Diego, CA 92131
(858) 267-5919
Brooke.Amash at sdcounty.ca.gov<mailto:Brooke.Amash at sdcounty.ca.gov>
Mailstop: P-83

[cid:image001.png at 01D78532.F4CE2A90]
CONFIDENTIALITY NOTICE:  This communication with its contents may
contain confidential and/or legally privileged information. It is
solely for the use of the intended recipient(s). Unauthorized
interception, review, use or disclosure is prohibited and may
violate applicable laws including the Electronic Communications
Privacy Act. If you are not the intended recipient, please contact
the sender and destroy all copies of the communication.

From: MCRAY MURDOCK (SDO) <Mcray.Murdock at usss.dhs.gov>
Sent: Friday, July 30, 2021 10:44 AM
Subject: [External] National Computer Forensics Institute Course Offerings for Fiscal Year 2022 (October - January)

Please see course offerings from NCFI listed below.

If you wish to submit your name for nomination, and you have NOT submitted your information with previous requests, please include the following with your desired course(s):

Full Name
DOB
SSN
Cell
Work address (not P.O. Box)
Rank / title
Reason for training.

If there is more than one date for the desired course, please list the dates you wish to attend in order of preference.

Regards,

SOCAL-CFTF

SUBJECT: National Computer Forensics Institute Course Offerings for
                   Fiscal Year 2022 (October - January)

The below listed courses are currently offered at the National Computer Forensics Institute (NCFI) from October, 2021 through January, 2022. The courses are divided into four categories: First Responder Courses, Basic Examiner Courses, Advanced Examiner Courses, and Prosecutor/Judge Courses. The nomination period for all courses ends on Friday, August 13, 2021.

IMPORTANT: To ensure the safety of personnel at the NCFI facility, and comply with COVID-19/CDC mandates, all students and staff will employ social distancing, wear masks, sterilize their workspace, and participate in daily personal temperature checks while present at the NCFI.

Furthermore, students will be required to submit a negative COVID test result received within 72 hours of travel to the NCFI.

Finally, all students will be required to name two (2) health care proxies, from either their agency or family members, in the event the attendee becomes ill and requires quarantine/hospitalization while in training at the NCFI

All courses are offered for both State/Local law enforcement and USSS personnel participation. However, USSS personnel must purchase training equipment through office/division funds prior to attendance of any course in which equipment is issued to students. Click here<https://intranet.ssnet.usss.dhs.gov/Investigations/NCFI/PublishingImages/Lists/Whats%20New/AllItems/NCFI%20Class%20Equipment%20-%20Pricing%20List%202021.pdf> for information.

First Responder Courses

These courses are designed for individuals who have a basic working knowledge of computers and computer investigations, but have no previous training to conduct digital forensic exams.

Skimmer Hunter (SKH)

A 3-day course, which trains first responders in the identification and recovery of Illicit Credit Card Skimmers, and investigative practices to disrupt criminal groups who deploy these devices. Through classroom instruction and hands-on experience, students learn to locate and extract skimmers from Gas Pump and Point of Sale Terminals. Graduates return home with issued equipment necessary to locate remote devices and conduct a thorough criminal investigation.

SKH 22-01
Date: November 2-4, 2021
This class is limited to 36 students. Travel to the NCFI on Monday, November 1, 2021 and return on Friday, November 5, 2021.

SKH 22-02
 Date: December 14-16, 2021
This class is limited to 36 students. Travel to the NCFI on Monday, December 13, 2021 and return on Friday, December 17, 2021.

Social Networking Investigations (SNI)

A 5-day course, which offers investigators insight and practical experience regarding online investigations associated with social media, email, and basic networking, as well as legal issues, and search and seizure procedures.

SNI 22-01
Date: November 29-December 3, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, November 28, 2021 and return on Friday, December 3, 2021.

SNI 22-02
Date: December 13-17, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, December 12, 2021 and return on Friday, December 17, 2021.

SNI 22-03
 Date: January 31-February 4, 2022
 This class is limited to 25 students. Travel to the NCFI on Sunday, January 30, 2022 and return on Friday, February 4, 2022.

Investigative Analyst Course (IAC)

A 5-day course for law enforcement investigative analysts who provide a support role in agency investigations.  This course will offer insight on identifying crimes in criminal cases, how to strategically gather pertinent information related to criminal cases, how to effectively link crimes and criminal activity, how to utilize various investigative tools and software to present information, as well as report and present evidence in courtroom testimony.

IAC 22-01 Pilot
Date: January 31-February 4, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 30, 2022 and return on Friday, February 4, 2022.

Introduction to Phone Repair (IPR)

IPR is a 5-day course, focused on diagnosing and repairing common mobile device issues which have rendered the device non-operational and subsequently impeded evidence recovery. Through classroom instruction and hands on practical exercises students will learn techniques to diagnose, remedy, and repair these issues. Students will learn skills required to properly solder and remove electronic components, replace screens and batteries, direct boot a device to a logic board via an external power supply, repair a data/charging port, and clean/transfer a logic board to a donor device.

IPR 22-01 Pilot
Date: January 3-7, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 2, 2022 and return on Friday, January 7, 2022.

Introduction to Skimmer Forensics (ISF)

ISF is a 5-day course focused on forensically analyzing the most commonly recovered Bluetooth Skimming device. Through classroom instruction and practical exercises students will learn how a Bluetooth Skimming device captures, stores, and transmits stolen access device data, as well as how to recover that data. Additionally, the class will focus on the analysis of the Bluetooth module whereby students will learn several techniques to recover artifacts useful in attributing the Skimmer to a suspect. Students will leave this course with the tools and knowledge required to complete a forensic examination on Bluetooth skimming devices.

ISF 22-01 Pilot
Date: January 24-28, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 23, 2022 and return on Friday, January 28, 2022.

Digital Currency Course (DCC)

DCC is a 5-day course, which provides law enforcement investigators basic knowledge regarding encrypted digital currency used in criminal activities. Students learn techniques in the trace of virtual cash systems, electronic evidence handling, and law enforcement challenges in investigations involving digital currency.

DCC 22-01
Date: December 6-10, 2021
This class is limited to 36 students. Travel to the NCFI on Sunday, December 5, 2021 and return on Friday, December 10, 2021.

DCC 22-02
Date: January 24-28, 2022
This class is limited to 36 students. Travel to the NCFI on Sunday, January 23, 2022 and return on Friday, January 28, 2022.

Digital Evidence Investigations (DEI)

A 5-day course, which provides first responders/investigators a working knowledge in the identification, extrapolation and analysis of digital evidence obtained from computers and other electronic devices: cellphones, GPS units, and tablets; as well as hands-on training with forensic analysis tools, legal issues, and report generation techniques.

DEI 22-01
Date: November 15-19, 2021
This class is limited to 36 students. Travel to the NCFI on Sunday, November 14, 2021 and return on Saturday, November 20, 2021.

DEI 22-02
Date: December 6-10, 2021
This class is limited to 36 students. Travel to the NCFI on Sunday, December 5, 2021 and return on Saturday, December 11, 2021.

Digital Investigations Supervisors Course (DISC)

A 3-day course designed for individuals who manage digital forensic labs or analysts. Students will gain knowledge as to what is involved in the technical world of a digital forensics analyst job, and how to efficiently manage workforce and case work flow in a digital forensics lab. Students will gain hands-on experience with lab management software, legal issues, and digital evidence management.

DISC 22-01 Pilot
Date: January 17-21, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 16, 2022 and return on Friday, January 21, 2022.

Basic Examiner Courses

These courses are designed for individuals who are newly assigned to conduct digital forensic exams or network intrusion investigations, and have a basic working knowledge of computers and computer investigations.

Network Intrusion Response Program (NITRO)

A 3-week intermediate course designed to train investigators on effective methods in the identification and collection of volatile data in response to network-based crime. Graduates return home with issued equipment to respond to network intrusions.

NITRO 22-01
Date: October 11-29, 2021
This class is limited to 36 students. Travel to the NCFI on Sunday, October 10, 2021 and return on Friday, October 29, 2021.

NITRO 22-02
Date: January 3-21, 2022
This class is limited to 36 students. Travel to the NCFI on Sunday, January 2, 2022 and return on Friday, January 21, 2022.

Vehicle Forensics Course (VFC)

A 5-day course for experienced digital forensics examiners in both computers and mobile devices. Through classroom instruction and hands-on experience, students learn to extract and analyze data from a vehicle's telematics and infotainment system. Graduates return home with issued equipment necessary to perform forensic examinations.

VFC 22-01
Date: November 15-19, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, November 14, 2021 and return on Friday, November 19, 2021.

VFC 22-02
Date: January 3-7, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 2, 2022 and return on Friday, January 7, 2022.

Digital Video Recorders (DVR)

A 5-day course designed for examiners/investigators regarding methodologies and techniques used to recover video evidence from Digital Video Recorders. Students learn the concepts of video forensics and garner skills needed to process recoverable evidence from video images.

DVR 22-01
Date: November 8-12, 2021
This class is limited to 36 students. Travel to the NCFI on Sunday, November 7, 2021 and return on Friday, November 12, 2021.

DVR 22-02
Date: January 31-February 4, 2022
This class is limited to 36 students. Travel to the NCFI on Sunday, January 30, 2022 and return on Friday, February 4, 2022.

Mobile Device Examiner (MDE)

A 4-week course, in which law enforcement personnel learn investigative methodologies and techniques in digital evidence extrapolation and analysis of mobile devices. Graduates return home with issued equipment necessary to perform forensic examinations.

MDE 22-01
Date: October 25-November 19, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, October 24, 2021 and return on Friday, November 19, 2021.

MDE 22-02
Date: January 3-28, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 2, 2022 and return on Friday, January 28, 2022.

Basic Computer Evidence Recovery Training (BCERT)

A 5-week course, which provides law enforcement investigators real-world experience with computer hardware, device imaging solutions, forensic analysis tools, legal issues, and report generation techniques. Graduates return home with issued equipment necessary to perform forensic examinations.

BCERT 22-01
Date: January 3-February 4, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 2, 2022 and return on Friday, February 4, 2022.

Drone Forensics Course (DFC)

A 5-day course for basic examiners, with focus on investigation and analysis of Unmanned Aerial Vehicles (UAVs). Students learn proper identification of UAV operation systems, and technical aspects of extraction/analysis of digital evidence obtained from subject devices.

DFC 22-01
Date: January 17-21, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 16, 2022 and return on Friday, January 21, 2022.

 Advanced Examiner Courses

These courses are designed for individuals who conduct digital forensic exams or network intrusion investigations, and have a solid understanding of digital forensics.

 Forensic Scripting Course (FSC)

A 5-day course for advanced examiners, focused on computer scripting through a combination of lecture, instructor-led demonstrations, and practical exercises. Students learn Python scripting used in the recovery of digital evidence, and report writing techniques for criminal investigations.

FSC 22-01
Date: November 29-December 3, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, November 28, 2021 and return on Friday, December 3, 2021.

FSC 22-02
Date: January 10-14, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 9, 2022 and return on Friday, January 14, 2022.

Mac Forensics Training (MFT)

A 2-week course for experienced examiners, focused on investigative tools and techniques utilized in digital evidence recovery in a Mac environment.

MFT 22-01
Date: November 1-12, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, October 31, 2021 and return on Friday, November 12, 2021.

MFT 22-02
Date: November 29-December 10, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, November 28, 2021 and return on Friday, December 10, 2021.

Advanced Forensics Training (AFT)

A 2-week course for experienced forensic examiners focused on advanced digital forensic data recovery.

AFT 22-01
Date: December 6-17, 2021
This class is limited to 25 students. Travel to the NCFI on Sunday, December 5, 2021 and return on Friday, December 17, 2021.

Prosecutor/Judge Courses

These courses are designed for Prosecutors and Judges to effectively prosecute and preside over cases involving digital forensic evidence.

Digital Evidence for Judges (DEJ)

A 5-day course that provides judicial officials understanding and insight regarding criminal investigations which contain digital evidence from computers, mobile devices, virtual storage networks, and other sources.

DEJ 22-01
Date: January 10-14, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 9, 2022 and return on Friday, January 14, 2022.

Digital Evidence for Prosecutors (DEP)

A 5-day course, which affords prosecutors techniques utilized in cybercrime investigations, and how to effectively present before the court digital evidence gathered from computers, mobile devices, virtual storage networks, and other sources.

DEP 22-01
Date: January 24-28, 2022
This class is limited to 25 students. Travel to the NCFI on Sunday, January 23, 2022 and return on Friday, January 28, 2022.

Prosecutor/Judge Courses

These courses are designed for state and local court officials who prosecute and preside over criminal cases, which involve digital forensics evidence.

NOTE: Please direct all prosecutor and judicial officials to email
NCFI.INFO at usss.dhs.gov<mailto:NCFI.INFO at usss.dhs.gov>, for course consideration. Nomination period will end on Friday, August 13, 2021.

NCFI staff will contact selected nominees who will be required to provide personal bank account information a minimum of three (3) weeks prior to travel to the NCFI to ensure receipt of advance of funds for daily meals and miscellaneous expenses.

Selection messages for NCFI classes will provide specific instructions for field office selectees.

All travel vouchers, SSF 3200, for state and local personnel will be completed at the NCFI prior to the students' return to their respective posts of duty.

**All offices are reminded it is the responsibility of the sponsoring office to notify nominees in their district of all travel and lodging arrangements. In the event of a cancellation, it is the responsibility of the sponsoring office to notify the NCFI and SATO.**

Nomination applications for all law enforcement personnel must be completed by the sponsoring agent and submitted via FIRS-NCFI application. - see link below

https://inv-apps2.usss.dhs.gov/ncfiFirs

Per TSA guidelines, all student identifiers are necessary for anyone who utilize air travel. The nominee's name should be as it appears on government issued identification such as their driver's license.

Nominees who wish to drive a GOV will be reimbursed for fuel expenses incurred from travel directly from their POD to Hoover, AL. A receipt must be provided for all fuel expenses. Personnel who choose to drive a POV will complete a cost comparison (completed by NCFI staff) and will be reimbursed for mileage at the lower cost of travel. Students will be reimbursed for airport parking and/or transportation costs to/from the airport at their POD provided they produce a receipt, which reflects incurred costs. These costs should be reasonable and the most inexpensive means utilized.(i.e. long term parking vs. short term parking should be utilized unless unavailable)

This official message serves as the nomination solicitation for all of the aforementioned training. Offices are requested and encouraged to contact state and local law enforcement entities in their district to notify them of these training opportunities.

All e-mail to/from this account is subject to official review and is for official use only. Action may be taken in response to any inappropriate use of the Secret Service's e-mail system. This e-mail may contain information that is privileged, law enforcement sensitive, or subject to other disclosure limitations. Such information is loaned to you and should not be further disseminated without the permission of the Secret Service. If you have received this e-mail in error, do not keep, use, disclose, or copy it; notify the sender immediately and delete it.   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sdtma.org/pipermail/members_sdtma.org/attachments/20210730/77962a8a/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 39369 bytes
Desc: image001.png
URL: <http://sdtma.org/pipermail/members_sdtma.org/attachments/20210730/77962a8a/attachment.png>