Title of Instruction: Identifying and Intercepting School Violence Through Cyber-Investigations

​Time Allotted:  3 Days Sixteen Hours (24)

​Target Group:  Patrol Officers, Detectives, Resource Officers, Probation and School Administrators

​Instructor:  Detective Richard Wistocki (RET.), Naperville, Illinois Police Department

​Method of Instruction:  Computer Lab and Class Room

​Items / Materials:  Flash Drives (supplied) with necessary documents

Instructional Objectives: Upon completion of the training exercises, participants will:

• Learn why it is important NOT to disregard information given to LEO or school officials.

• Understand what the term “Leakage” means and how we can interpret the information.

• Learn about free and open source online investigative tools.

• Know items of cyber evidence needed to successfully identify suspects who post online threats.

• Learn the three-step process in investigating internet crimes.

• Learn the importance of Preservation, Exigent Circumstances and Search Warrants if needed.

• Learn how to obtain IP’s, screen names, screen captures, and email headers

• Outline state laws covering; Terrorist Threat, Falsely Making a Terrorist Threat, Swatting and Causing a Catastrophe.

• Once suspect is identified, importance of search warrant, arrest, interrogation and mental evaluation.

• We will examine a successful cyber-crime case study investigation from start to finish.

Schedule Day 1 of 3

Session Time: 0800 a.m.- 0830 am 

Presenter: Detective Rich Wistocki (RET) Naperville Illinois Police ICAC

Attendees on first day: School Social workers, School Admin, Superintendents, Principals, School Attorneys, Local Law Enforcement, SRO’s and Prosecutors.

Session Time: 0830-0930 AM:

Topic: What is Leakage? Why is it important to take a report? School Admin Role? LEO Role? When an SRO is Important?

Session Time: 0930-0945 AM

BREAK

Session Time: 0945 a.m.-10:45 a.m.

Topic: History of School Shooters and what they posted online

Session Time: 1045-1100 AM

Do you know what your schools web filtering does?

Session Time: 11:00 AM- 12:15 PM

Topic: Tools Used to investigate Internet Crime/ Search Investigative Tool Bar/ Snagit

Session Time: 12:15-1:15 PM

LUNCH Sponsored by the Restoration and Recovery Foundation, HoldFastNV, Dad Inc, and The Exchange Club of Las Vegas

 Session Time: 1:15PM-2:30 PM

Topic: The use of ECPA / Preservation/ Exigent / Subpoenas / Search Warrants

Session Time: 2:30 PM – 2:45 PM

BREAK

Session Time: 2:45PM- 4:00 PM

Topic: Presentation of the BSC Flow Chart

End at 4:00 PM

Schedule Day 2 of 3

Session Time: 0800 AM – 1600 AM

Presenter: Detective Rich Wistocki (RET) Naperville Illinois Police ICAC

Attendees on second day: Optional for School Administrators, Mandatory for Local Law Enforcement, SRO’s and Prosecutors.

Session Time: 0800-0900 AM

Topic: Refresh what was learned the previous day and the process of investigating Internet Crime

The Poster was “KIDDING” Arrest or Diversion? What is Juvenile Justice Online.org?

Session Time: 0900-0915 AM

BREAK

Session Time: 0930 a.m.-10:45a.m.

Topic: What Information does the LEO need from the witness and the school?

Session Time: 1045-1100 AM

Break

Session Time: 11:00 AM- 12:15 PM

Topic: Review of Michigan Criminal Statutes, policy and procedures of 3 search warrants to be executed on the residence, Computers, Cell Phones and Social Media for overall intent of this case.

Session Time: 12:15-1:15 PM

LUNCH Sponsored by the Restoration and Recovery Foundation, HoldFastNV, Dad Inc, and The Exchange Club of Las Vegas

Session Time: 1:15PM-2:30 PM

Topic: Cell Phone Forensics Logical versus Physical Examination

Session Time: 2:30 – 2:45 PM

Topic: Working actual previous cases using tools that were taught on Day 1

BREAK

Session Time: 3:00 – 4:00 PM

Topic: Working actual previous cases using tools that were taught on Day 1

Schedule Day 3 of 3

Session Time: 0800-0900

Topic: Refresh what was learned the previous day and the process of investigating Internet Crime Going over topics for today.

Session Time: 0900-9:15AM

BREAK

Session Time: 0930 – 10:45 AM

Topic: 3 types of cases from flow chart Working actual cases that have occurred last school year.

Session Time: 1045-1100 AM

Break

Session Time: 11:00 AM- 12:15 PM

Topic: Review of Michigan Criminal Statutes, policy and procedures

Creating 3 search warrants to be executed on the residence, Computers, Cell Phones and Social Media for overall intent of this case.

Session Time: 12:15-1:15 PM

LUNCH Sponsored by the Restoration and Recovery Foundation, HoldFastNV, Dad Inc, and The Exchange Club of Las Vegas

Session Time: 1:15PM-2:30 PM

Topic: Group Learning Creating the search warrants for your case.

Session Time: 2:30 – 2:45 PM

BREAK

Session Time: 3:00 – 4:00 PM

Topic: Juvenile Suspect was “Just Kidding” How Can We Use Diversion instead of arrest to give the juvenile the mental health help they need.

Evaluations and review Class Ends