1. INTERNET INVESTIGATIONS

2. GOAL:  Identify different people by using online tools / information  Gather information about different people  Gather information linked to your crime

3. TOOLS  https://app.echosec.net/ - Location based search https://app.echosec.net/  Linked to cree.py – analyze user based on geolocation  https://www.hanzresolver.com/skype2 https://www.hanzresolver.com/skype2  Graph method Facebook  DEMO

4. 3. WHAT CAN THEY GIVE ON A VOLUNTARY BASE.…  Internal “policy” of the provider  Easy ISP : AOL, …..  More difficult : Twitter, …..  Depending on the crime: for example child abuse  “Next-of-kin procedure” in a murder case  Again, you will need to ask the ISP to make sure if they are able to provide you with an answer or not.

5. OBTAIN INFORMATION FROM ISP IN THE USA  Imminent Physical Threat  Imminent  Physical  Threat  Provider decides himself if it is an Imminent Physical Threat. You will need to ask the ISP to make sure…

6. PRESERVATION OF INFORMATION IN THE US.… No data retention law in the USA Preservation order – based on US Legislation US ISP needs to preserve information For 90 days – extendable with another 90 days Immediately contact US Embassy or ISP directly for preservations request

7. WHEN USA/DOJ CAN’T DO ANYTHING.… No crime : freedom of speech,…. Not enough “damage”  Question the Department of justice to make sure

8. IF YOU DON’T HAVE ENOUGH INFORMATION FOR AMERICAN LAW.… US Legislation only mention that identification information is available with an official national request, To obtain the “content” you will need “probable cause”. In many cases this can cause a lot of problems.  Question the Department of Justice.

9. CONCLUSION Try to handle as fast as possible:  Check all possibilities  Preservations - extensions  Check what is possible with the ISP  Check what is possible with the US DOJ  Check what is possible with US Law Enforcement,…

10. Questions?