REGIONAL COUNTERDRUG TRAINING ACADEMY

Investigation of Crime Scene Computers and Internet Communications in Drug Trafficking Investigations

Length : 5 days

Designed For : This course is designed for narcotics investigators who investigate crimes involving computers and Internet use. Students should have an introductory knowledge of computer and Internet use but the course does not require an extensive background or detailed knowledge.

Prerequisites : None.

Certification : This course is POST certified in the states of Mississippi and Georgia and accepted for certification in other states.

Description :The primary objective of this five - day course is to help narcotics investigators understand how drug traffickers use computers to store information on their transactions and for Internet communications. Students gain a basic knowledge of how computers and Internet communications operate. They learn how drug traffickers use the Internet to order supplies, to communicate with each other and to market their products.

The emphasis of the course is"hands-on". Students learn to use email, news groups and Internet Relay Chat (IRC) to identify drug traffickers. They also learn how to use these communications to conduct proactive investigations or Internet sting operations. They learn how to disguise themselves on the Internet and to trace back communications with suspects.

Seizing crime scene computers and the basic approaches to computer forensics are discussed. Students learn the necessary steps to conducting a forensic examination of a computer and the need to isolate all computer media at the crime scene. Although students learn the basics of forensics during this course, specific techniques are taught during a separate advanced course.

Each student participates in a number of online exercises applying the approaches and techniques presented. They also learn how traffickers and other criminals target law enforcement computers and the basic computer security techniques used to manage this threat. Students receive a CD-ROM with a number of programs and reference documents, including remote control software.

Upon completion of this course, students should have a working knowledge of how computers and Internet communications operate. They will be prepared to use Internet communications to identify potential sources of narcotics and to conduct proactive investigations. They will also be prepared to seize a crime scene computer and they will understand the basic steps to conducting a forensic examination. Finally, they will have a better understanding of the future challenges involving computers, the Internet and narcotics traffickers.