Morales Feliciano,et v. John A. Rullan, 378 F.3d 42, 1st Cir. (2004)
Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013....
Transcript of Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013....
![Page 1: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/1.jpg)
Social Mediafor Investigators
A presentation for #UKAFI2013.June 3-5, 2013. London, UK
Robert RullanRullan Global Consulting Group
![Page 2: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/2.jpg)
Rullan Global Consulting Group
Robert RullanPresident / CEO
C. 408 475 3495
[email protected]/RullanGlobal
linkedin.com/in/robrullanTwitter: @fire4fx
![Page 3: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/3.jpg)
Public Safety Officer - Sunnyvale DPS
Firefighter / Engineer
Police Officer
EMT
Fire Inspector / Fire Investigator
Crime Scene Investigator
![Page 4: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/4.jpg)
B.A. - Political Science - University of Hawaii
M.A. - Government & Politics - St. John’s Univ.
M.F.S. - Forensics Science - National U. (in progress)
Certified Instructor - CA POST
Certified Fire Investigator I - CA OSFM
Certified Fire Prevention Officer - CA OSFM
CVFI , CFEI - National Assoc. Fire Investigators
Crime Scene Investigator - CA POST
![Page 5: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/5.jpg)
really cool job!
![Page 6: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/6.jpg)
Also introducing...Trusty sidekick (aka intern)
![Page 7: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/7.jpg)
Rullan Global Consulting Group
Gabriel DensfordIntern
C. 408 476 8500
[email protected]/RullanGloballinkedin.com/in/gdensford
Twitter: @gdensford
![Page 8: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/8.jpg)
Disclaimer
No legal advice; consult your legal team
Follow department / agency policies
Opinions are my own
IT department may disagree w/ much of this presentation
![Page 9: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/9.jpg)
“It is not the strongest of the species that survive, nor the most intelligent, but the one most responsive to change.”
Charles Darwin
![Page 10: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/10.jpg)
![Page 11: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/11.jpg)
What is
Social Media?
![Page 12: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/12.jpg)
Google+
MySpace
YouTube
Mocospace
Orkut
Plaxo
Watford Observer
radio station
what else?
What is social media?
![Page 13: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/13.jpg)
![Page 14: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/14.jpg)
![Page 15: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/15.jpg)
Socialnomics 2013
![Page 16: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/16.jpg)
Social Media =
Open Source Intel
![Page 17: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/17.jpg)
“Social media will be a valued source of information to the SIOC intelligence analyst because it will be both eyewitness and first response to the crisis. Social Media has evolved to be the first instance of communication about a crisis trumping traditional first responders, including journalists. Social Media is rivaling 911 in crisis response and reporting. Analysts will often use Social Media to receive the first tip off that a crisis has occurred, collect details of the crisis, and can even serve as evidence for investigation, thus, it is an integral part of intelligence operations.” FBI’s RFI - Feb. 2012
![Page 18: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/18.jpg)
Valued source of info. to the intel analyst.
Eyewitness and first response to crisis.
First instance of communication at crisis.
Analysts use it as tip off that crisis has occurred.
Evidence for investigation.
![Page 19: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/19.jpg)
![Page 20: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/20.jpg)
The emergence of Temporary Social MediaThings have changed*
* again
![Page 21: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/21.jpg)
![Page 22: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/22.jpg)
![Page 23: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/23.jpg)
![Page 24: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/24.jpg)
![Page 25: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/25.jpg)
“good old police work” with FB
connect with confidential informants
FB as a canvassing tool
FB as a tip line
FB as a press release
![Page 26: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/26.jpg)
Other uses for FB
alibi
establish character of subject
communication
![Page 27: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/27.jpg)
Human Trafficking
“Facebook Sex Trafficking: Social Network Used to Kidnap Indonesian Girls”. AP Oct 29, 2012, as reported in www.huffingtonpost.com
“Facebook, the human trafficking platform”. Jan. 20, 2011. www.wired.com
![Page 28: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/28.jpg)
most popular social network - over 1 billion users.
profiles are available for personal and business use.
privacy settings can be customized
easy to use
![Page 29: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/29.jpg)
Challenges of FBno identification required - anyone can sign up as anyone
legal compliance issues
evidence is often collected inappropriately
“I don’t do Facebook”.
![Page 30: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/30.jpg)
Privacy settings
connecting
tagging
apps
posting
![Page 31: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/31.jpg)
Safety concerns
personal computers
personal FB profiles
hackers
![Page 32: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/32.jpg)
Downloading user’s profile
Consent - useful / preferred
Much easier than last time
Account settings,
Download copy of your FB data.
![Page 33: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/33.jpg)
Download the archive, and start having fun!
![Page 34: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/34.jpg)
Facebook LE portal
facebook.com/records
must have LE email address;
no need to resubmit requests;
can keep track of pending requests;
preservation letters, subpoena, court orders, search warrants
![Page 35: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/35.jpg)
How much information?
Subpoena = basic subscriber records (name, length of service, cc info, email address, and recent login/logout IP address).
Court order = additional info, not including contents of communications, which may include message headers and IP addresses).
SW = stored contents (messages, photos, videos, wall posts, location info)
![Page 36: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/36.jpg)
Twittermicroblog
limited characters
no ID required
limited privacy
great listening tool
![Page 37: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/37.jpg)
![Page 38: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/38.jpg)
![Page 39: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/39.jpg)
Twitter termstweet - message
DM - direct message - user to user
RT - retweet - resending someone else’s original tweet
hashtag - # (pound sign) - used to track conversations
followers - able to get specific tweets
![Page 40: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/40.jpg)
![Page 41: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/41.jpg)
Twitter terms (cont’d)abt = aboutb/c = becauseBFN = bye for nowcld = coulddeets = detailsEMA - email addressF2F = face to faceIC = i see
ICYMI = in case you missed it
idk = i don’t knowkk = cool coolNTS = note to selfOH = overheardTMB = tweet me back
![Page 42: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/42.jpg)
Geochirp.com
Trendsmap.com
Twittermap.appspot.com
Where are you?
![Page 43: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/43.jpg)
Platforms
Platforms allow you to monitor several searches, usernames, accounts, profiles - simultaneously
www.tweetdeck.com
www.hootsuite.com
![Page 44: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/44.jpg)
Googleeasily accessible
customize your search
advanced settings
specific / detailed searches
![Page 45: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/45.jpg)
Google +
Reader
Calendar
Docs
Alerts
Translate
Blogs
Voice
There’s more to Google than meets the eye
![Page 46: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/46.jpg)
Image searching
![Page 47: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/47.jpg)
Google + Twitter
Twilert is your new best friend. www.twilert.com
![Page 48: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/48.jpg)
Photography based social network
Owned by Facebook
Independent privacy policy / TOS.
Mobile app
Limited privacy
![Page 49: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/49.jpg)
![Page 50: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/50.jpg)
![Page 51: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/51.jpg)
![Page 52: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/52.jpg)
Flickr
Photography based
Owned by Yahoo!
Limited privacy
Geolocation features
Searchable
![Page 53: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/53.jpg)
LegalWhat are the challenges faced by legal professionals when dealing with current technology?
How do local (UK, EU) laws apply to international companies?
Is a company based in Taiwan responsible for what its users post? Must they comply with UK search warrants?
![Page 54: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/54.jpg)
Legal casesit’s all about Federal Rules of Evidence
Connecticut v. Eleck Aug. ‘11Eleck was convicted on assault 1st degree.
Court excluded FB printout which would have impeached a witness against Eleck.
The issue was AUTHENTICATION of evidence.
![Page 55: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/55.jpg)
Griffin v. State of Maryland. 2011
Convicted of homicide in 2005.
On girlfriend’s MySpace page the words written “snitches get stitches”.
The issue here was AUTHENTICITY.
![Page 56: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/56.jpg)
New York v. Clevenstine Dec. 2009
Convicted of sexual acts with 2 minor females.
MySpace messages between suspect and victims entered as evidence.
Suspect claimed this was not properly admitted; not authenticated.
![Page 57: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/57.jpg)
Claim denied, because:
victims testified that they had sent the messages;
forensic examination of hard drive indicated access to site, etc;
compliance officer from MySpace testified as to creation of messages, etc. = AUTHENTICATED.
![Page 58: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/58.jpg)
Skype Records every call, every chat session, and SMS messages.
Skype Log Parser - RedWolf Computer Forensics
Windows XP - C:\Documents and Settings|<username>\Application data\Skype\<username>
Vista / Win 7 - C:\Users\<username>\AppData\Roaming\Skype\<skype-name>
![Page 59: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/59.jpg)
Browser Forensics
Chrome History View - reads all history from Google Chrome.
Internet Evidence Finder - www.jadsoftware.com
Mandiant Web Historian -
![Page 60: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/60.jpg)
Exif Viewer
Exiftool by Phil Harvey
able to read metadata in various different file types
You may find tool at: owl.phy.queensu.ca/~phil/exiftool
![Page 61: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/61.jpg)
A Network for Professionals
![Page 62: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/62.jpg)
“Try not to become a person of success, but a
person of value”
Albert Einstein
![Page 63: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/63.jpg)
What is LinkedIn?
A business oriented social networking site.Unlike FB - no pictures.Resumes, CVs, etc.
![Page 64: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/64.jpg)
I already have Facebook. Why do I need LinkedIn?You make connections, not necessarily “friends”.
It can be used to find jobs, people, and business opportunities.
You don’t post pictures (other than profile).
You post qualifications, skills,
![Page 65: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/65.jpg)
What else?Professional groups - make connections with members of those groups.Post discussions in those groups, ask for resources, or invite like-minded professionals to your events.
![Page 66: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/66.jpg)
Groups?Groups are created around various themes. For example:
alumni associations
veterans
geography
industry
You can create your own group!
![Page 67: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/67.jpg)
More on groups...I’m connected to Tom on LinkedIn,
I see that he belongs to the group “Consultants Network”,
I check the group’s profile, because I may be interested in:
joining
investigating someone who may be into that interest
![Page 68: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/68.jpg)
ConnectionsMost people will have connections visible to other connections.
You can check a person’s connections to see if you want to:
meet that person,
learn about that person,
investigate that person.
![Page 69: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/69.jpg)
Connect - NetworkWe no longer have time to be on the phone all the time, catching up with people, asking about their lives;
We just want to know -
What can I do for you?
What can you do for me?
LinkedIn allows you to stay connected professionally with those who you care to stay connected with.
![Page 70: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/70.jpg)
Real Life 21st Century InsuranceVehicle Fire Investigation classNYPD Arson & Explosion Squad
![Page 71: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/71.jpg)
Investigative Determine suspect’s:
associates;
background;
level of education;
professional interests / accomplishments;
![Page 72: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/72.jpg)
More investigative uses
Are there people in his old job / school / association who are willing to talk to you?
Is his background in insurance / accounting / investigation / security of any relevance to your investigation?
![Page 73: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/73.jpg)
Preservation letters
Privacy policies
Contact information
Changes in the law
Changes in technology
Keys to success
![Page 74: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/74.jpg)
Limits?Your creativity.
Your curiosity.
The type of crime.
The type of suspect.
Time.
![Page 75: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/75.jpg)
By changing nothing,nothing changes.
Tony Robbins
![Page 76: Social Media for Investigators - UK...Social Media for Investigators A presentation for #UKAFI2013. June 3-5, 2013. London, UK Robert Rullan Rullan Global Consulting Group Rullan Global](https://reader030.fdocuments.net/reader030/viewer/2022041016/5ec7d9aa5a099c78ef0b2300/html5/thumbnails/76.jpg)
Thank you for your time.
Please contact me at:
(408) 476 [email protected]
On Twitter: @fire4fx
Be safe out there.