Book Title: Placing the Suspect Behind the Keyboard: DFIR Investigative Mindset Author: Brett Shavers Book Website: Placing the Suspect Behind the Keyboard Where to Buy: Amazon* Chapters Include:

Technical Skills
- Tech Prowess
Knowledge
- Rules of Civil/Criminal Procedure
- Rules of Evidence
- Evidence is not only just evidence
- Does evidence prove or disprove theories?
Self-Assessment
- Who are you?
- Curiosity
- Your Identity
- Other DFIR investigative traits
- Your brain
- Assessing your team
- Self-assessment rating
Senses
- Perceptions & perspectives
- Seeing & observing
- Hearing & listening
Hacking Your Mind
- Critical thinking
- Creative thinking
- Visual thinking
- Additional thinking models
- Critical reading
- Logic and reasoning
- Cognition and ignorance
- Theories and hypothesis
- Think
- Bias
- Fallacies and reasoning errors
Tactics
- Old school & high tech
- Checklists & procedures
- The Investigative Cycle(s)
- Live Cycles, Kill Chains, & Crime Scripting
- Profiling
- Identity
- Link analysis
- Notetaking
- Problem-solving
- Visualization to see the case
Strategies
- Micro and Macro
- Decision-making
- Focus and distractions
- Correlation and causation
- Targeting and pivoting
- Errors and mistakes
- Dumb ideas and terrible solutions
- Words (and choice of words) matter
Transformation
- Scenario-based training
- Visualization drills
- Writing and speaking
- Memory & documentation
- Case studies
- Unconscious competence?
- Shadowing
- Daily life of a critical thinker
- Peer review
Wisdom
- Know yourself & seek self-improvement
- Technical competence is your responsiblity
- Hack your brain
- Hack the adversary
- Personal and professional accountability
- Ethics and corruption
- Credibility and reliability
- Faults and competence
- Pitfalls and self-made traps
Education & Training
- You need both training and education in DFIR
AI as the Investigator
Time to Liftoff
- Obstacles to developing a DFIR Investigative Mindset
Conclusion
- My last bit of guidance for you

*As an Amazon Associate I earn from qualifying purchases. This helps with the cost of running this website.

Newest Additions

Login