AP100 Axiom Digital Evidence Reporting: A Prosecutor's Toolkit
Magnet Axiom Digital Evidence Reporting: A Prosecutor’s Toolkit (AP100) is an introductory-level, three-day training course designed for criminal prosecutors. It provides a strengthened understanding of digital forensics and how it applies to prosecutorial duties.
Description
Magnet Axiom Digital Evidence Reporting: A Prosecutor’s Toolkit (AP100) is an introductory-level, three-day training course designed for criminal prosecutors. It provides a strengthened understanding of digital forensics and how it applies to prosecutorial duties.
This course details the application of various case law in the United States, alongside the use of Magnet Axiom’s evidence analysis capabilities, examining computer, cloud, and mobile evidence sources.
Students will learn about how case law pertains to the prosecution of criminal cases involving digital evidence, prompts for direct and cross examination, and how to ensure that evidence is properly maintained for use in legal proceedings.
Course modules
Module 1: Course introduction
- Meet the instructor and other students and get a look at what is expected for the training event.
- Discuss how digital evidence is viewed in different jurisdictions and explore challenges related to admissibility.
Module 2: Foundations of digital forensics & evidence anatomy
- Explore the foundations of digital forensics and the scope of this work.
- Understand how to correctly articulate the various components of digital evidence, including storage mediums and other hardware considerations.
- Review various case law influencing digital evidence of admissibility.
- Learn how to more effectively collaborate during digital forensic investigations with examiners.
Module 3: Search and seizure considerations
- Examine legal and practical considerations governing searches and seizures.
- Differentiate between consent searches and search warrants.
- Discover strategies for drafting search warrants tailored for digital evidence.
- Explore the concept of file hashing and practical considerations.
Module 4: How data is stored
- Learn how hardware components, such as traditional hard drives and solid-state drives, store data for both computer and mobile devices.
- Understand the concepts of partitioning, wear leveling, and TRIM.
Module 5: Evidence acquisition & device characteristics
- Review best practices for computer and mobile evidence acquisition.
- Understand acquisition and extraction types for both computer and mobile devices.
- Explore the different mobile device states.
- Learn the distinction between system level and application specific artifacts.
Module 6: Magnet Axiom & the forensic tool marketplace
- Explore the role forensic tools play in the criminal justice system.
- Understand how magnet axiom process ingests evidence for analysis in axiom examine.
- Gain insight into the general tool marketplace.
Module 7: Computer examinations & common artifacts
- Understand the key data points involved in windows computer examinations.
- Learn about the most commonly used windows artifacts in examinations, including how the operating system generates and stores them.
- Track user activity, learn about application traces, and see how each contributes to reconstructing timelines, behavior, and user attribution.
Module 8: Cloud
- Understand the role that cloud-based data plays in modern forensic investigations.
- Identify common sources of cloud evidence, including mobile device backups and third-party cloud storage devices.
- Gain an understanding of the legal considerations associated with accessing remote data, including the use of warrants, consent, and compliance with statutory requirements.
Module 9: Mobile device examinations & common artifacts
- Explore common artifacts in mobile device examinations.
- Learn how Magnet Axiom’s reporting features support prosecutorial settings.
- Discover the power of Magnet Axiom’s portable cases and collaboration features.
Module 10: Reporting, validation, and legal strategy
- Explore how digital evidence is authenticated.
- Understand potential admissibility challenges for your digital evidence.
- Gain an understanding of direct and cross examination prompts.
- Learn how to educate a jury on your digital forensic findings.