Education for Cyber Crime Investigators

Digital forensics and cyber crime investigations are continually growing, rapidly changing fields requiring law enforcement agencies to meet very rigorous training requirements. New opportunities for committing criminal activity against persons, organization or property are presented every day with the proliferation of personal digital devices, computers, the internet, computer networks, and automated data systems. Whether the crime involves attacks against computer systems, electronic information, or more traditional crimes such as murder, money laundering or fraud, electronic evidence is becoming more prevalent. It is no surprise that law enforcement and criminal justice officials are being overwhelmed by the volume of investigations and prosecutions that involve electronic evidence. Fortunately, processes and procedures, as well as a variety of software and hardware tools have been developed to speed up and standardize the recovery of evidence from suspect media. Each of these tools provides specific capabilities within certain specialized areas. Training in the proper use of these tools is crucial for recovering forensically sound evidence in a manner which will withstand legal scrutiny. It is crucial for the success of future criminal investigations that the law enforcement community has access to timely, inexpensive, and readily available digital forensics and cyber crime investigations training material. This paper describes the development of a modular educational curriculum for training entry-level criminal investigators in the skills necessary to conduct a cyber crime scene investigation and evidentiary collection through the use of digital forensic tools. The curriculum incorporates multiple training methodologies, including instructor-led and multimedia based coursework. The curriculum’s instructor-led portion uses a classroom style presentation that provides 8-hours of interactive coursework. The participants are engaged in the actual process of evidence collection and a limited presentation on the uses of the forensic tools that are available to them. Additionally, the coursework is scaled to the user’s experience level, broken down to three levels: introductory, intermediate and advanced. The multimedia based coursework is designed to be scalable to a law enforcement agency’s needs. The agency has the ability to select from a list of modular curriculum that targets specific needs of an investigator. In addition to the modular framework of the multimedia course, levels of experience are also incorporated. The multimedia coursework will allow the user to actually engage interactively with the materials, simulating a hands-on investigation. This curriculum offers multiple delivery options that law enforcement agencies can take advantage of, regardless of size or geographical disposition. The material in both the instructor-led and multimedia courses are updated to remain timely and keep the user’s well versed in the latest use of tools and procedures, insuring the investigative and evidentiary process remain intact. Keywords: digital forensics, law enforcement, educatio

A Description of the Stratigraphy, Features and Artifacts from an Archeological Excavation at the Alamo

Report on the last of three parts of an archaeological project conducted at Mission San Antonio de Valero (The Alamo) to recover architectural data, historical information, and valuable antiquities

Towards Redaction of Digital Information from Electronic Devices

In the discovery portion of court proceedings, it is necessary to produce information to opposing counsel. Traditionally, this information is in paper form with all privileged information removed. Increasingly, the information requested during discovery exists in digital form and savvy counsel is requesting direct access to the original digital source: a broad spectrum of additional digital information can be often be extracted using digital forensics. This paper describes the major problems which must be solved to redact digital information from electronic devices. The primary hurdle facing digital redaction is the lack of a rational process for systematically handling encoded, encrypted, or otherwise complex data objects. Any such process would need to incorporate a method for validating the integrity of electronic or digital redaction processes. Keywords: digital forensics, redaction, electronic discovery, legal production, privileg

Factors affecting the recovery of Mexican wolves in the Southwest United States

Recovering and maintaining large carnivore populations is a global conservation challenge that requires better knowledge of the factors affecting their populations, particularly in shared landscapes (i.e. non-protected areas where people occupy and or utilize the land). The Mexican wolf (Canis lupus baileyi) is an endangered wolf subspecies being recovered on shared landscapes in the Southwest United States and Mexico. We used data from the U.S. program to model population growth, evaluate the impact of management removal and illegal killing relative to other demographic factors, and test hypotheses about factors influencing rates of management removal and illegal killing. From 1998 to 2019, the population growth averaged 12% per year. Rates of natural reproduction, illegal killing and other mortality remained consistent over the 22 years; while releases, translocations and management removals varied markedly between two time periods, phase 1:1998–2007 and phase 2:2008–2019. The number of wolves removed for conflict management was higher during phase 1 (average ~ 13 per year, rate = 24.8%) than phase 2 (average of ~5 per year, rate = 5.2%). This decrease in management removal resulted in the wolf population resuming growth after a period of population stagnation. Two factors influenced this decrease, a change in policy regarding removal of wolves (stronger modelling support) and a decrease in the number of captive-reared adult wolves released into the wild (weaker modelling support). Illegal mortality was relatively constant across both phases, but after the decrease in management removal, illegal mortality became the most important factor (relative importance shifted from 28.2% to 50.1%). Illegal mortality was positively correlated with rates of reintroduction and translocation of wolves and negatively correlated with the rate of management removal. 6. Synthesis and applications. Using management removal to reduce human–carnivore conflict can have negative population impacts if not used judiciously. Recovering and maintaining carnivore populations in shared landscapes may require greater tolerance of conflict and more emphasis on effective conflict prevention strategies and compensation programs for affected stakeholders

CARMA Measurements of the Sunyaev-Zel'dovich Effect in RXJ1347.5-1145

We demonstrate the Sunyaev-Zel'dovich (SZ) effect imaging capabilities of the Combined Array for Research in Millimeter-wave Astronomy (CARMA) by presenting an SZ map of the galaxy cluster RXJ1347.5-1145. By combining data from multiple CARMA bands and configurations, we are able to capture the structure of this cluster over a wide range of angular scales, from its bulk properties to its core morphology. We find that roughly 9% of this cluster's thermal energy is associated with sub-arcminute-scale structure imparted by a merger, illustrating the value of high-resolution SZ measurements for pursuing cluster astrophysics and for understanding the scatter in SZ scaling relations. We also find that the cluster's SZ signal is lower in amplitude than suggested by a spherically-symmetric model derived from X-ray data, consistent with compression along the line of sight relative to the plane of the sky. Finally, we discuss the impact of upgrades currently in progress that will further enhance CARMA's power as an SZ imaging instrument.Comment: 8 pages, 6 figure

The dose of hemodialysis and patient mortality

The dose of hemodialysis and patient mortality. The relationship between the delivered dose of hemodialysis and patient mortality remains somewhat controversial. Several observational studies have shown improved patient survival with higher levels of delivered dialysis dose. However, several other unmeasured variables, changes in patient mix or medical management may have impacted on this reported difference in mortality. The current study of a U.S. national sample of 2,311 patients from 347 dialysis units estimates the relationship of delivered hemodialysis dose to mortality, with a statistical adjustment for an extensive list of comorbidity/risk factors. Additionally this study investigated the existence of a dose beyond which more dialysis does not appear to lower mortality. We estimated patient survival using proportional hazards regression techniques, adjusting for 21 patient comorbidity/risk factors with stratification for nine Census regions. The patient sample was 2,311 Medicare hemodialysis patients treated with bicarbonate dialysate as of 12/31/90 who had end-stage renal disease for at least one year. Patient follow-up ranged between 1.5 and 2.4 years. The measurement of delivered therapy was based on two alternative measures of intradialytic urea reduction, the urea reduction ratio (URR) and Kt/V (with adjustment for urea generation and ultrafiltration). Hemodialysis patient mortality showed a strong and robust inverse correlation with delivered hemodialysis dose whether measured by Kt/V or by URR. Mortality risk was lower by 7% (P = 0.001) with each 0.1 higher level of delivered Kt/V. (Expressed in terms of URR, mortality was lower by 11% with each 5 percentage point higher URR; P = 0.001). Above a URR of 70% or a Kt/V of 1.3 these data did not provide statistical evidence of further reductions in mortality. In conclusion, the delivered dose of hemodialysis therapy is an important predictor of patient mortality. In a population of dialysis patients with a very high mortality rate, it appears that increasing the level of delivered therapy offers a practical and efficient means of lowering the mortality rate. The level of hemodialysis dose measured by URR or Kt/V beyond which the mortality rate does not continue to decrease, though not well defined with this study, appears to be above current levels of typical treatment of hemodialysis patients in the U.S

Observations of High-Redshift X-Ray Selected Clusters with the Sunyaev-Zel'dovich Array

We report measurements of the Sunyaev-Zel'dovich (SZ) effect in three high-redshift (0.89 ≤ z ≤ 1.03), X-ray selected galaxy clusters. The observations were obtained at 30 GHz during the commissioning period of a new, eight-element interferometer—the Sunyaev-Zel'dovich Array (SZA)—built for dedicated SZ effect observations. The SZA observations are sensitive to angular scales larger than those subtended by the virial radii of the clusters. Assuming isothermality and hydrostatic equilibrium for the intracluster medium and gas-mass fractions consistent with those for clusters at moderate redshift, we calculate electron temperatures, gas masses, and total cluster masses from the SZ data. The SZ-derived masses, integrated approximately to the virial radii, are 1.9^(+0.5)_(-0.4) × 10^(14) M_☉ for Cl J1415.1+3612, 3.4^(+0.6)_(-0.5) × 10^(14) M_☉ for Cl J1429.0+4241, and 7.2^(+1.3)_(-0.9) × 10^(14) M_☉ for Cl J1226.9+3332. The SZ-derived quantities are in good agreement with the cluster properties derived from X-ray measurements

Constraints on the Thermal Contents of the X-ray Cavities of Cluster MS 0735.6+7421 with Sunyaev-Zel'dovich Effect Observations

Outbursts from active galactic nuclei (AGN) can inflate cavities in the intracluster medium (ICM) of galaxy clusters and are believed to play the primary role in offsetting radiative cooling in the ICM. However, the details of how the energy from AGN feedback thermalizes to heat the ICM is not well understood, partly due to the unknown composition and energetics of the cavities. The Sunyaev-Zel'dovich (SZ) effect, a measure of the integrated pressure along the line of sight, provides a means of measuring the thermal contents of the cavities, to discriminate between thermal, nonthermal, and other sources of pressure support. Here we report measurements of the SZ effect at 30 GHz toward the galaxy cluster MS 0735.6+7421 (MS0735), using the Combined Array for Research in Millimeter-wave Astronomy (CARMA). MS0735 hosts the most energetic AGN outburst known and lobes of radio synchrotron emission coincident with a pair of giant X-ray cavities $\sim 200$ across. Our CARMA maps show a clear deficit in the SZ signal coincident with the X-ray identified cavities, when compared to a smooth X-ray derived pressure model. We find that the cavities have very little SZ-contributing material, suggesting that they are either supported by very diffuse thermal plasma with temperature in excess of hundreds of keV, or are not supported thermally. Our results represent the first detection (with $4.4 \sigma$ significance) of this phenomenon with the SZ effect.Comment: 15 pages, 9 figures, submitted to ApJ Jun 2018, Accepted Dec 2018, Published Jan 2019. This is the version of the article before editing, as submitted by an author to ApJ. IOP Publishing Ltd is not responsible for any errors or omissions in this version of the manuscript or any version derived from it. The Version of Record is available online at https://doi.org/10.3847/1538-4357/aaf88