Archive for the ‘Company News’ Category

Now available: 3 free model policies for social networking support

Wednesday, May 12th, 2010

Our 2-day on-site training devotes a fair amount of time to policy issues: investigative ethics applied online, undercover work, deconfliction, and employee stress management. However, while we talked about the need for policy, we didn’t have a model to offer.

Well, now we do! In the “White Papers” section of our Web site, you’ll now find three separate model policies: social networking investigations, official agency communication, and employee off-duty use.

Why 3 policies?

Law enforcement presence online isn’t just about gathering evidence. It’s also about ensuring that employees represent themselves and their agencies as professionals at all times (including not conducting investigations via their personal accounts). Also, just as agencies simultaneously conduct investigations and community relations in their communities, they should at least consider doing the same online.

The three policies complement each other, and as Todd is quoted in our press release, they’re meant to minimize the risk and maximize the reward of an online presence. They also fill a gap: while many policies are available from private companies, few are published by law enforcement agencies.

What the policies cover

The “Investigative Use of Social Networking” policy provides for:

  • Professional online conduct
  • Investigation preparation
  • Undercover work
  • Legal issues
  • Employee stress management

The “Agency Official Use of Social Networking” policy discusses:

  • Social media tools
  • Strategy for use
  • Communicating on the agency’s behalf
  • Restrictions on use
  • Handling requests from media and general public

The “Employee Off-Duty Use of Social Networking” policy includes:

  • Employee self-identification as a police officer
  • Confidential and sensitive information
  • Legal requirements
  • Disciplinary action

Because these are model policies, be sure to run them through administrators and department or other legal staff before you implement them, as state or jurisdictional laws may need to be specifically addressed.

Who will benefit?

We timed these policies’ release during the week of the ICAC Conference in Jacksonville, FL, where Todd is exhibiting. Now, we know ICAC investigators are well-versed in online investigation and thus policy – but we also know that their investigations can take them into jurisdictions where other detectives are not familiar with online work, undercover or otherwise.

So whether you’re an investigator whose agency needs social networking policies, or you know of investigators who do, please feel free to pass these along. You can refer others to the policy page using this address:

http://tinyurl.com/verepolicies

And if you have any questions, please let us know at info (at) veresoftware (dot) com !

Social Media, Travel, Speeches and FourSquare

Thursday, April 29th, 2010

As much as I try to avoid business travel anymore, the more I seem to do.  Although travel is not bad it can get overwhelming at times and seems to just put me further behind. I did recently in my travels have the opportunity to speak, on an as of late favorite topic, and that is the use of Social Media by law enforcement. Specifically I was speaking on the lack of policy by agencies starting to use Social Media, not only as a community policing tool, but as an investigative tool.

Recently I was asked to present at the first annual SMILE conference or Social Media in Law Enforcement conference in Washington DC. This was a great gathering of various law enforcement professionals interested in Social media and its implementation within law enforcement. My specific piece was on the policy decision behind using social media as a law enforcement tool.  I spoke about the need to have policy to protect the law enforcement officer as much as the agency. I was able to speak with some great talent in the field that are adapting social media for investigative and communicative reasons.

I also had the opportunity to speak at the Massachusetts Attorney Generals Cyber crime Initiative quarterly meeting. The Mass AG sponsors a meeting quarterly on various cybercrime topics. She brings in investigators from all over the state to discuss cybercrime. I was lucky enough to speak on the investigation of social media, and of course hit the topic of policy for law enforcement.  The crowd of over 200 Massachusetts law enforcement investigators was eager to understand more about investigating social media especially as it applied to Cyber bullying cases.

During the two weeks I was gone, connecting to so many investigators in person, I wanted to be sure not to lose touch with my online contacts — not just customers and prospects who email me, but also Twitter and Facebook followers. So, as a smartphone user, I downloaded a new app and signed up for a new program called “Foursquare”. The use of FourSquare allowed me to stay connected on the road from my phone.  I could and did update my Facebook page and my twitter account from my phone with a few clicks of the keyboard.

I found this to be a simple and easy use of the media and received numerous comments back regarding my updates. Many were interested in my travels and found the topics I was speaking on of interest.

Why am I mentioning this? When I talk to groups like these, I want to be sure they understand the value of social networking in their professional lives — not just from an investigative standpoint, but also from the standpoint of being able to network and share ideas with one another. Our increasingly interconnected world makes this an absolute necessity.

Are you on Foursquare, Twitter, Facebook or LinkedIn? Please feel free to connect with me.

By popular demand: WebCase adds new features

Friday, March 26th, 2010

WebCase users have been asking us for three things:

  • Full page capture
  • HTML, or “source,” code capture
  • 64-bit compatibility

We’re very pleased to have just released these features in WebCase 1.9, which is available now. Current WebCase users will find their efficiency improved via full page and HTML capture functions. Meanwhile, investigators who work exclusively on 64-bit systems can now take advantage of WebCase.

Full page and HTML capture

Full page capture improves efficiency, in part, with automatic scrolling. In previous WebCase versions, investigators had to scroll manually to areas of a page that were not immediately visible on the screen. Lengthy pages such as those seen on MySpace could result in numerous screenshots. Now with one click, WebCase captures an entire web page in a single JPEG graphic file.

WebCase 1.9 also introduces the ability to copy only the web page’s HTML (Hyper Text Markup Language), or underlying “source” code, to an evidence file. Some web pages are difficult to archive properly because of the embedded code, and previous versions of WebCase required several steps to archive the code. The HTML copy function allows just one step to document the source code for later review.

To see these two new features in action, watch our video here!

64-bit compatibility

64-bit systems have the performance to process more demanding applications, such as audio and video encoding, so 64-bit compatibility is important as WebCase users move to the latest in desktop computing technology.

Finally, WebCase 1.9 now also supports Windows 7 along with Vista and XP, and adds Internet Explorer 8 to its list of supported browser versions.

We’re still working on getting the demo version available, but meanwhile, please view the video (and the others we have available) — and please sign up for our next WebCase webinar on April 1st. (No April Fool’s!)

Cloud computing: Not just for geeks or feds

Monday, February 8th, 2010

Think online investigation is just for the high-tech crimes types, the computer forensics geeks or the feds? Not so, says Todd in his interview with Cyber Speak’s Podcast (hosted, ironically, by two former federal agents). The more people are online, the more they’re likely to use cloud services, the more important it is for local law enforcement to be there too.

Todd’s appearance on Cyber Speak came about because of his two-part article on cloud computing, which had appeared in December in DFI News. He and Ovie Carroll discuss:

Impact of cloud computing on first responders

Detectives performing searches can’t simply pull the plug on a running computer anymore (a fact which prosecutors are having to get used to). They need to be able to perform data triage and possibly even volatile data collection.

Why? Because knowing whether a suspect has an online presence is critical to whether an arrest is made—and what happens afterward. Whether users are actively storing files “in the cloud” or simply members of social networking sites, law enforcement officers who don’t find evidence and therefore, do not make an arrest risk that suspect going online and deleting all incriminating information.

Why is this a problem? Because the very nature of cloud storage means investigators may not be able to access a logical hard drive somewhere to recover the evidence. First, the sheer amounts of data stored on servers make this close to impossible. Second, there are jurisdictional issues.

Are you exceeding your authority?

Not only may information be stored outside your jurisdiction, but it may also be stored in another country altogether—one with different criminal and privacy laws. Accessing evidence of a crime in the United States may actually mean committing a crime in another country (Todd relates the story of two FBI agents for whom arrest warrants were issued in Russia).

This is a problem for local law enforcement, which Todd notes has been left largely to its own devices when it comes to online crime. Only Internet Crimes Against Children (ICAC) task forces have clear direction from the federal government on how to proceed.

Hence it’s easy for local police to kick Internet crimes up to regional, state or federal task forces. But as Todd points out, more people coming online means more crimes being committed against people in local jurisdictions both large and small. Law enforcement at every level needs to be able to respond.

Please listen to Todd and Ovie, and then come back and tell us what you think!

Christa M. Miller is Vere Software’s marketing/public relations consultant. She specializes in law enforcement and public safety and can be reached at christa at christammiller dot com.

Todd on CyberCrime 101: Episode 7

Friday, February 5th, 2010

Last month while Todd was training in New York City, he had a chance to meet Joe Garcia, a computer crimes detective we connected with on Twitter. Joe has a podcast, CyberCrime 101, about all things computer forensics and information security. After reviewing the WebCase demo, he kindly invited Todd on the show to talk.

Their focus: Todd’s background, WebCase, and being president of the International High Tech Crimes Investigators’ Association (HTCIA). Joe voiced his approval for our tutorial screencasts, as well as our webinars and 2-day training; Todd told us that WebCase now offers 64-bit support, and will soon be released in a new version that has more features.

Thanks for having Todd on the show, Joe!

Christa M. Miller is Vere Software’s marketing/public relations consultant. She specializes in law enforcement and public safety and can be reached at christa at christammiller dot com.

A DFI News double feature

Friday, February 5th, 2010

We were pleased and honored in December when Digital Forensics Investigator (DFI) News opted to give two of Todd’s articles top billing on its site.

The articles, a two-part series, addressed whether collection of electronic evidence from the Internet is feasible. Some say no; obviously, we say yes!

In Part I, Todd drew from his 2007 white paper, “Collecting Legally Defensible Online Evidence,” to discuss the need for and development of a standard methodology for Internet evidence collection. In Part II, he addressed the application of that methodology specifically to “cloud” computing.

The cloud does present different challenges to evidence collection than do conventional Internet sources. But that doesn’t mean evidence collection from the cloud is impossible.

Read Part I here and Part II here. And please be sure to come back and tell us what you think. Do you agree? Disagree? Have you encountered the need for Internet evidence collection methodology… or investigative issues specific to the cloud? Comments are open!

Christa M. Miller is Vere Software’s marketing/public relations consultant. She specializes in law enforcement and public safety and can be reached at christa at christammiller dot com.

Podcast: Todd talks social media, online investigations

Monday, November 30th, 2009

Canada-based podcasting service provider The Daily Splice recently started its own podcast: Law Enforcement 2.0, in which marketer Mike Waraich interviews individuals who are involved with encouraging police departments to “join the conversation” online.

Social media is, of course, beginning to figure into much more than conversation: it’s playing a role in everything from online crime to police recruiting to intelligence. Because all of this information must be verifiable, police need a standard methodology to collect it.

Which is why Mike invited Todd on the show a few weeks ago. For just about half an hour, the two discussed the following:

Defining online investigation in terms of standard methodology.

Would online investigation be less “scary” if the people conducting it knew they could do it without their veracity being called into question? Standardized process counts for a lot, so being able to date/time stamp, “digitally fingerprint” (hash), and log Internet evidence in the same way other forms of evidence are authenticated can make investigators’ jobs a lot easier.

Social media as a “neighborhood.”

Most everyone under 30 (and many over 30) are, in some ways, members of this online space. Just as in a real-world neighborhood, the number of “residents” = number of potential victims. And crimes are being committed, not just on the Web, but in other areas of the Internet which are their own communities. (Think chat rooms, instant messaging and Usenet.)

Whether law enforcement can coexist with community relations.

As long as law enforcement is an active participant in the online community, it cannot be misconstrued as “Big Brother” watching. Instead, it brings community policing concepts to the Web: like a park in a bad section of town, it will stay “bad” unless law officers go there, partner with people who live there to clean it up.

Reputation management.

What people post on the Web is there forever. Some law enforcement officers need to be made cognizant of this fact. Employers look at people’s social media profiles not just to make hiring decisions, but also to ensure their employees are maintaining the standard expected of them.

Part of maintaining that standard is not to avoid parts of the neighborhood which are not well understood or liked. Investigators who do need to understand that the “conversation” goes on without them. Not to be there for it risks missing valuable intelligence and other information.

In other words, as Todd put it, “You may not want to go into a bad neighborhood because you know bad things can happen, but you still need to be there.”

Understanding the neighborhood.

Just as a good cop takes time to learn the landscape and culture of the neighborhood s/he is responsible for, a good Internet investigator takes time to understand where people are online–and where they are moving, what they are talking about, what they are doing.

With hundreds of social sites, this can be hard to figure out much less monitor. But the more investigators learn, the more they can make online investigation part of their everyday work lives, the more efficient they will become.

The conversation wrapped up, of course, with a short discussion about WebCase and where it fits in all this. Thanks again to Mike for the interest. We hope to be able to participate in future podcasts!

Christa M. Miller is Vere Software’s marketing/public relations consultant. She specializes in law enforcement and public safety and can be reached at christa at christammiller dot com.

Sources of Online Information: Some Background

Wednesday, September 9th, 2009

Cynthia Navarro understands how overwhelming Internet searches for information can be. Not only does she do them in the course of her work as a private investigator, but she also regularly teaches law enforcement officers, corporate practitioners, and others about what’s available and how to find it.

Her “Sources of Online Information” webinar grew out of that experience. “The Internet is a tool that augments what you already have and enables you to get more,” she says. “I base my training on how investigators can get what they need. If they need an individual’s professional information, there’s LinkedIn or Spokeo. If they need personal information, I show them what they can and cannot get from various sites, and how that information is presented.”

She also shows how to perform “creative” searches across Web sites, not just in Google but using search utilities included in social networking sites. “Different results come up for my name, Cynthia Navarro, than for ‘Cynthia Navarro’ enclosed in quotes,” she explains. Likewise results that include a keyword combined with a name, such as the individual’s interests or profession.

Sometimes investigators must collect information from people directly, using social networking sites to get personal. Such “pretexting” is necessary because people would not otherwise give up information to someone they know is an investigator. Pieced together with data gleaned from searches, this can become an invaluable means of constructing a case.

Connecting people, connecting identities

Navarro provides numerous examples of the ways it’s possible to use Web-based information to connect people to each other, as well as to find “other lives” they lead. One man she investigated turned out to have a profile on Match.com—as a woman. “People you wouldn’t expect to be associated with certain sites turn out to have a real dark side,” Navarro explains.

They also have certain habits, “things they need to get out there about themselves,” she says. “One CHP officer used his police vehicle and uniform in one of his Match.com pictures. I used him as an example in my classes, and not long after, his profile was deleted. But when he came back later on, using a different profile with different information, he still had a photo of a police vehicle.”

Navarro recognized him because she’d talked about him so much; she now uses the example to discuss how one deleted profile doesn’t necessarily mean another isn’t available.

Keeping up with information changes

Because Web-based information changes so rapidly, Navarro teaches that two things are important:

  • Evidence capture and preservation. “Within just one hour, a profile can go from public to private or even deleted,” she notes.
  • Evidence verification. “Some people post totally false information, so the investigator needs to know where to go to verify that what’s out there is true,” she says. Likewise what they find on information retrieval services, which may not contain the most up-to-date data.

Overall, as Navarro teaches, many different tools exist for evidence capture; investigators must know which are most appropriate for the investigator’s needs at the time. She cites Archive.org as one example of ways investigators can see what a website looked like at a certain point in time.

Most important for investigators to know: “The enormous amount of information at their fingertips,” says Navarro.

Christa M. Miller is Vere Software’s marketing/public relations consultant. She specializes in law enforcement and public safety and can be reached at christa at christammiller dot com.

Cybercrime under the microscope

Wednesday, January 21st, 2009

This week in two separate parts of the world, Adelaide, Australia and Orlando, Florida, cybercrime is being discussed. In both conferences they are discussing the need to collect online evidence. In Orlando at the National Law Center’s Child Defenders Expo local, state and federal law enforcement officers are learning about the methods to prevent and investigate crimes against children on the Internet. In Adelaide, at the e-Forensics 2009 conference sponsored by the University of Adelaide, they are meeting to discussing the ways collecting of Internet evidence to aid in the prosecution of criminal.

Both conferences are addressing the growing need collect evidence from the internet for the purposes of successful prosecutions. In Adelaide, Dr. Sorrell says prosecuting internet criminals is very difficult because evidence may be hard to access: “We’re looking at the way in which that sort of evidence can be presented in court and what needs to be done with that evidence to ensure that it’s accepted by the court.”

Vere software is once again here to the rescue. Our flagship product “WebCase” is the solution that both of these groups need. In fact, Todd Shipley, President of Vere Software is presenting at the National Law Centers conference this week on that very topic. His presentation is entitled “Policing the Internet: Proper Collection of Digital Evidence from the Internet”. As an Internet Investigation tool, WebCase is able to record and collect Internet evidence for the investigator in any country. If the investigator can browse to the location on the Internet, no matter which country it resides in, WebCase can record as evidence the content of a website.

In Memory of William "Bill" Siebert

Monday, December 22nd, 2008

It is with great sadness that we at Vere Software note the passing of a member of our company family.  Mr. William (Bill) Siebert was not only the Vice President of Product Management and Customer Relations  but a great friend. Bill was a giant in computer forensic industry. He was one who touched many and changed our lives just for knowing him.

A memorial page has been set up for those wishing to post comments about Bill at http://memorialwebsites.legacy.com/WilliamSiebert/Homepage.aspx.

Bill will be missed, but as he continually reminded us, only “Those who dare to fail miserably can achieve greatly”.