workshop objectives investigation standards · 1 16 th privacy and security conference conducting...

7
1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC. http://www.toddington.com © 2015 Toddington International Inc. [email protected] WORKSHOP OBJECTIVES Upon attending this workshop, participants will be able to: Describe current standards for online investigation equipment Describe current standards for preserving online evidence Provide examples of events leading increased online privacy awareness Provide examples of imagery used to confirm identity, location or activity Identify five critical website tools for conducting online investigations Identify how online research benefits online investigation processes Provide examples of how geolocationcapabilities can benefit investigations Provide examples of how training benefits investigators / decision-makers © 2015 Toddington International Inc. INVESTIGATION STANDARDS EQUIPMENT REPORTING SOFTWARE EVIDENCE © 2015 Toddington International Inc. EQUIPMENT PC or Mac Processor: 2.5-3.5GHz +, Intel i5-i7 RAM: 8-12GB Hard Drive: only 250 needed Graphics card/video memory Multiple USB ports/convertible ports Large screens / Multiple screens DVD burner? 500GB HDD? Mobile device? © 2015 Toddington International Inc. SYSTEM SOFTWARE System settings MS Office, Apache, iWork (text/slide/table) Adobe Acrobat Virus protection programs Zoomplayer(multi-format video player) Dropbox (large document transfer) GoogleEarth (mapping/imaging) Skype (communications) Calculator © 2015 Toddington International Inc.

Upload: others

Post on 24-May-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

1

16TH PRIVACY AND SECURITY CONFERENCE

CONDUCTING ONLINE INVESTIGATIONS

11-13 FEB 2015, VICTORIA, BC

1

TODDINGTON INTERNATIONAL INC. http://www.toddington.com

© 2015 Toddington International Inc.

[email protected]

WORKSHOP OBJECTIVES

Upon attending this workshop, participants will be able to:

• Describe current standards for online investigation equipment

• Describe current standards for preserving online evidence

• Provide examples of events leading increased online privacy awareness

• Provide examples of imagery used to confirm identity, location or activity

• Identify five critical website tools for conducting online investigations

• Identify how online research benefits online investigation processes

• Provide examples of how geolocation capabilities can benefit investigations

• Provide examples of how training benefits investigators / decision-makers

© 2015 Toddington International Inc.

INVESTIGATION STANDARDS

EQUIPMENT

REPORTING

SOFTWARE

EVIDENCE

© 2015 Toddington International Inc.

EQUIPMENT

• PC or Mac

• Processor: 2.5-3.5GHz +, Intel i5-i7

• RAM: 8-12GB

• Hard Drive: only 250 needed

• Graphics card/video memory

• Multiple USB ports/convertible ports

• Large screens / Multiple screens

• DVD burner? 500GB HDD?

• Mobile device?

© 2015 Toddington International Inc.

SYSTEM SOFTWARE

• System settings

• MS Office, Apache, iWork (text/slide/table)

• Adobe Acrobat

• Virus protection programs

• Zoomplayer (multi-format video player)

• Dropbox (large document transfer)

• Google Earth (mapping/imaging)

• Skype (communications)

• Calculator

© 2015 Toddington International Inc.

Page 2: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

2

WORK SOFTWARE

• Internet Explorer browser

• Google Chrome browser

• Mozilla Firefox browser

• Tor Onion browser

• Print screen (basic)

• CutePDF Writer (document capture)

• Browser/online programs (audio/video capture)

• Snaggit 10.1 (screen/scrolling capture)

• Hotspot Shield (anonymity software)

© 2015 Toddington International Inc. © 2015 Toddington International Inc.

CONTEXT

© 2015 Toddington International Inc.

QUALITY

© 2015 Toddington International Inc.

BLOCKS

© 2015 Toddington International Inc.

PETS

© 2015 Toddington International Inc.

PROPERTY

Page 3: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

3

© 2015 Toddington International Inc.

INVESTMENT

© 2015 Toddington International Inc.

DOCUMENTS

© 2015 Toddington International Inc.

FAKES

© 2015 Toddington International Inc.

THE SUBJECT

© 2015 Toddington International Inc.

THE RESIDENCE

© 2015 Toddington International Inc.

THE VEHICLE

Page 4: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

4

© 2015 Toddington International Inc.

THE VESSEL

© 2015 Toddington International Inc.

THE ACTIVITY

© 2015 Toddington International Inc.

THE AUDIO

© 2015 Toddington International Inc.

MOZILLA FIREFOX

© 2015 Toddington International Inc.

GOOGLE

© 2015 Toddington International Inc.

FACEBOOK

Page 5: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

5

© 2015 Toddington International Inc.

LINKEDIN

© 2015 Toddington International Inc.

WAYBACK MACHINE

© 2015 Toddington International Inc.

YOUR BRAIN

© 2015 Toddington International Inc.

GOOGLE MAPS

© 2015 Toddington International Inc.

GOOGLE MAPS

© 2015 Toddington International Inc.

GOOGLE MAPS

COMPASS VIEW

TILT VIEW

SLIDE VIEW

ZOOM VIEW

STREET VIEW

ZOOM VIEW

NO TILT VIEW

STREET VIEW

AND HERE’S WHY

MOUSE - SLIDE VIEW

ZOOM VIEW

STREET VIEW

TILT VIEW

COMPASS VIEW

MOUSE - SLIDE VIEW

Page 6: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

6

© 2015 Toddington International Inc.

810 FORT STREET

© 2015 Toddington International Inc.

810 FORT STREET

© 2015 Toddington International Inc.

810 FORT STREET

© 2015 Toddington International Inc.

THE EXAMPLE

© 2015 Toddington International Inc.

THE EXAMPLE

Area = 606 km2

Population = 2.7 millionHouseholds = 1.2 million

© 2015 Toddington International Inc.

THE EXAMPLE

Page 7: WORKSHOP OBJECTIVES INVESTIGATION STANDARDS · 1 16 TH PRIVACY AND SECURITY CONFERENCE CONDUCTING ONLINE INVESTIGATIONS 11-13 FEB 2015, VICTORIA, BC 1 TODDINGTON INTERNATIONAL INC

7

© 2015 Toddington International Inc.

?

THE EXAMPLE

© 2015 Toddington International Inc.

THE EXAMPLE

THE FUTURE

• Knowledge of technology is a future necessity

• Misuse and abuse of technology is being learned at a younger age

• Awareness is required to identify privacy vulnerabilities and needs

• Mobile devices are the focus of future research and monitoring

• “As one door closes, another door opens…”

TODDINGTON INTERNATIONAL INC.

16TH PRIVACY AND SECURITY CONFERENCE

CONDUCTING ONLINE INVESTIGATIONS

11-13 FEB 2015, VICTORIA, BC

7

http://www.toddington.com

© 2015 Toddington International Inc.

[email protected]