Social Media Investigations - X1 · PDF file•No computer investigation workflow...

18
Social Media Investigations: X1 Social Discovery Briefing & Hands-On Training with NW3C

Transcript of Social Media Investigations - X1 · PDF file•No computer investigation workflow...

Page 1: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Social Media Investigations X1 Social Discovery Briefing amp

Hands-On Training with NW3C

About the Presenters Tyler Wotring Computer Crimes Specialist

National White Collar Crime Center

Brent Botta VP Product Development

X1 Discovery

John Patzakis President amp CEO

X1 Discovery

Social Media Investigations

About X1 Discovery

bull Founded by Idealab

bull Providing next generation eDiscovery for social media cloud and the

enterprise

bull Powered by award winning and patented X1 search technology

bull Driven by a proven and experienced eDiscovery team

bull Supporting over 100 enterprise customers

X1 wins test of six third-party search

tools for Windows desktops

July 2010 Clear Choice Test

Network World

ldquohellipOur Clear Choice Test winner

is X1 Professional Client In every

test scenario it proved superiorrdquo

Social Media Investigations

1 billion registered users

Registration open to people 13 and older

Purpose general updates

300000000 registered users

Registration open to all ages

Purpose general micro-blogging updates

120000000 registered users

Registration open to people 18 and older

Purpose business and professional networking

Top 3 Most Active Social Networking Websites

Legal Database Search 688 federal and state court published decisions involving social media (2010 amp 2011)

bull 80 percent increase in cases for 2012

5 Notable Criminal Cases in 2012 bull Bradley v State (Texas) Facebook evidence used to ID assailants and other witnesses

bull Hoffman v State (Del) 18-year old convicted of vehicular manslaughter

Myspace photos and comments glamorizing alcohol abuse lead to sentence

enhancement

bull People v Mincey (Calif) Sex offender violated probation through Facebook use

bull US v Anderson (Dist Ct ND) Pedophile used Facebook to identify and lure victims

bull US v Collins (Dist Ct Calif) Anonymousldquo hackers employed Twitter to communicate

and coordinate attacks Terms of probation sought to prevent the defendants from using

Twitter while on probation

Number of Social Media Cases in 2010 amp 2011

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 2: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

About the Presenters Tyler Wotring Computer Crimes Specialist

National White Collar Crime Center

Brent Botta VP Product Development

X1 Discovery

John Patzakis President amp CEO

X1 Discovery

Social Media Investigations

About X1 Discovery

bull Founded by Idealab

bull Providing next generation eDiscovery for social media cloud and the

enterprise

bull Powered by award winning and patented X1 search technology

bull Driven by a proven and experienced eDiscovery team

bull Supporting over 100 enterprise customers

X1 wins test of six third-party search

tools for Windows desktops

July 2010 Clear Choice Test

Network World

ldquohellipOur Clear Choice Test winner

is X1 Professional Client In every

test scenario it proved superiorrdquo

Social Media Investigations

1 billion registered users

Registration open to people 13 and older

Purpose general updates

300000000 registered users

Registration open to all ages

Purpose general micro-blogging updates

120000000 registered users

Registration open to people 18 and older

Purpose business and professional networking

Top 3 Most Active Social Networking Websites

Legal Database Search 688 federal and state court published decisions involving social media (2010 amp 2011)

bull 80 percent increase in cases for 2012

5 Notable Criminal Cases in 2012 bull Bradley v State (Texas) Facebook evidence used to ID assailants and other witnesses

bull Hoffman v State (Del) 18-year old convicted of vehicular manslaughter

Myspace photos and comments glamorizing alcohol abuse lead to sentence

enhancement

bull People v Mincey (Calif) Sex offender violated probation through Facebook use

bull US v Anderson (Dist Ct ND) Pedophile used Facebook to identify and lure victims

bull US v Collins (Dist Ct Calif) Anonymousldquo hackers employed Twitter to communicate

and coordinate attacks Terms of probation sought to prevent the defendants from using

Twitter while on probation

Number of Social Media Cases in 2010 amp 2011

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 3: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

About X1 Discovery

bull Founded by Idealab

bull Providing next generation eDiscovery for social media cloud and the

enterprise

bull Powered by award winning and patented X1 search technology

bull Driven by a proven and experienced eDiscovery team

bull Supporting over 100 enterprise customers

X1 wins test of six third-party search

tools for Windows desktops

July 2010 Clear Choice Test

Network World

ldquohellipOur Clear Choice Test winner

is X1 Professional Client In every

test scenario it proved superiorrdquo

Social Media Investigations

1 billion registered users

Registration open to people 13 and older

Purpose general updates

300000000 registered users

Registration open to all ages

Purpose general micro-blogging updates

120000000 registered users

Registration open to people 18 and older

Purpose business and professional networking

Top 3 Most Active Social Networking Websites

Legal Database Search 688 federal and state court published decisions involving social media (2010 amp 2011)

bull 80 percent increase in cases for 2012

5 Notable Criminal Cases in 2012 bull Bradley v State (Texas) Facebook evidence used to ID assailants and other witnesses

bull Hoffman v State (Del) 18-year old convicted of vehicular manslaughter

Myspace photos and comments glamorizing alcohol abuse lead to sentence

enhancement

bull People v Mincey (Calif) Sex offender violated probation through Facebook use

bull US v Anderson (Dist Ct ND) Pedophile used Facebook to identify and lure victims

bull US v Collins (Dist Ct Calif) Anonymousldquo hackers employed Twitter to communicate

and coordinate attacks Terms of probation sought to prevent the defendants from using

Twitter while on probation

Number of Social Media Cases in 2010 amp 2011

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 4: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

1 billion registered users

Registration open to people 13 and older

Purpose general updates

300000000 registered users

Registration open to all ages

Purpose general micro-blogging updates

120000000 registered users

Registration open to people 18 and older

Purpose business and professional networking

Top 3 Most Active Social Networking Websites

Legal Database Search 688 federal and state court published decisions involving social media (2010 amp 2011)

bull 80 percent increase in cases for 2012

5 Notable Criminal Cases in 2012 bull Bradley v State (Texas) Facebook evidence used to ID assailants and other witnesses

bull Hoffman v State (Del) 18-year old convicted of vehicular manslaughter

Myspace photos and comments glamorizing alcohol abuse lead to sentence

enhancement

bull People v Mincey (Calif) Sex offender violated probation through Facebook use

bull US v Anderson (Dist Ct ND) Pedophile used Facebook to identify and lure victims

bull US v Collins (Dist Ct Calif) Anonymousldquo hackers employed Twitter to communicate

and coordinate attacks Terms of probation sought to prevent the defendants from using

Twitter while on probation

Number of Social Media Cases in 2010 amp 2011

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 5: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Legal Database Search 688 federal and state court published decisions involving social media (2010 amp 2011)

bull 80 percent increase in cases for 2012

5 Notable Criminal Cases in 2012 bull Bradley v State (Texas) Facebook evidence used to ID assailants and other witnesses

bull Hoffman v State (Del) 18-year old convicted of vehicular manslaughter

Myspace photos and comments glamorizing alcohol abuse lead to sentence

enhancement

bull People v Mincey (Calif) Sex offender violated probation through Facebook use

bull US v Anderson (Dist Ct ND) Pedophile used Facebook to identify and lure victims

bull US v Collins (Dist Ct Calif) Anonymousldquo hackers employed Twitter to communicate

and coordinate attacks Terms of probation sought to prevent the defendants from using

Twitter while on probation

Number of Social Media Cases in 2010 amp 2011

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 6: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Cyber Bullying

Missing Persons

Gangs

Violent Crimes

Child Crimes

White Collar

Organized Crimes

Domestic Violence

Common Cases for Law Enforcement

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 7: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Jury Monitoring

Personal Injury Claims

IP TheftInfringement

Employment Litigation

Common CorporateLitigation Matters

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 8: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

1 Scale

bull Screen captures wholly inadequate

bull Need to search filter and manage up to millions

of social media items from disparate sources

in a single case

2 Authentication

bull Numerous legal challenges in reported case law

bull No computer investigation workflow previously supported

3 Alteration and Dynamic Content

bull Social media evidence can be easily altered

Core Challenges For Social Media Evidence Collection

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 9: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

No Unique Laws of Evidence

bull FRE 901(a) Governs

State of Connecticut vs Eleck (2011)

bull Authorship of Facebook messages disputed

bull Simple printout of the Facebook items failed to establish foundation

bull Court cites cases where ESI authenticated by their unique metadata

and other circumstantial evidence that provide ldquoidentifying

characteristicsrdquo

Harden vs State of Florida (May 23 2012)

bull Conviction overturned due to ldquoincompleterdquo production of social media

evidence

Authentication of Social Media Evidence

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 10: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Example Facebook Metadata Fields

Field Description

created_time When post or message on Facebook was created

thread_id Unique identifier of a message thread

recipients All recipients of a message by name

post_id Unique id number of a wall post

application Medium used to post a Facebook item (ie from an

from iPhone)

user_id Unique id of the item posterauthor

account_id Unique id of a users account

geolocation Geographic coordinates

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 11: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

bull Ground-breaking

- 1st solution designed for law enforcement eDiscovery and

computer forensic professionals to address social media

bull Investigative platform

- To collect authenticate search review and produce evidence

from website collection YouTube webmail amp social media sites

bull Fast and Scalable

- Automated collection instantaneous federated searches

bull Defensible

- Best practices to preserve and authenticate data from multiple

sources

X1 Social DiscoveryTM

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 12: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

ldquoIn my tests X1 was fast and responsivehellip

The interface is clean and simple with a logical

layout And the feature set is just about everything

you could ask for as you dig into the burgeoning

mounds of status updates tweets digital pictures

hash tags comments and links

- John K Waters Technology reporter for Law Technology News

X1 Social Discovery reduces project time from days to hours

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 13: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

X1 Social Discovery costs $945 for an annual license

X1 Social Discovery License Cost

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 14: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

About NW3C

bull provide nationwide support system for law enforcement and regulatory

agencies involved in the prevention investigation and prosecution of

economic and high-tech crime

bull deliver training in computer forensics cyber and financial crime

investigations and intelligence analysis

bull offer investigative support to agencies investigating white collar and

related crimes

bull conduct original research on all facets of white collar crime

bull a valuable partner in the Internet Crime Complaint Center (IC3reg)

which allows victims of cyber crime to report incidents to law

enforcement

National White Collar Crime Center

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 15: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

X1SD Training Class

bull NW3C new course curriculum related to learning understanding and

using the X1 Social Discovery software

bull Receive hands on knowledge walking through all the features and

functionality of the X1 Social Discover software

bull Class Price $595

bull Next Class December 5 in New York City area ndash register today

Social Media Investigations

The training was very good The instructor covered all the material and I feel very confident that I can use X1 properly The

NW3C facility was top notch Nothing but good things to say

- Forensic Investigator

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 16: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

X1Social Discovery

Product Demonstration

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 17: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Simulated Cyber Bullying Case

bull Using the primary victimrsquos account

bull Identifying players and relationships by conversation review with

time filtering

bull Tagging critical items for later usage

bull Adding the collection of other accounts identified in the initial review

bull Continuing organized review and identifying critical pieces of

potential evidence

bull Geo Mapping and filtering

bull Exporting

Product Demo Scenario

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt

Page 18: Social Media Investigations - X1 · PDF file•No computer investigation workflow previously supported 3. ... YouTube, webmail & social ... X1 Social Discovery reduces project time

Contact us

X1 Discovery

Brent Botta

bbottax1discoverycom

John Patzakis

jpatzakisx1discoverycom

Social Media Investigations

NW3C

Tyler Wotring

twotringnw3corg

General training information

(877) 628-7674

trainingnw3corg

Register now for this training class gt