1. BOTNETs and the Criminal Underground Presented by: Lee Shields Cyber Crime Intel Team National Intelligence Coordination Centre 1

2. 2 What is a BOTNET?

3. BOTNET Operators  Hacktivists  Hacker (the kid next door?!)  Organized Crime Groups 3

4. 4 Underground Services

5. Cyber Crime Skills  Computer / Device Forensics  COMPFOR, A+  Encase, FTK  Network Forensics  Protocols  Devices  Tools / Methodologies  Cloud Computing 5

6. Cyber Crime Skills (Cont’d)  Specialized Data Acquisition  Volatile Data (RAM)  Log files  VM’s, Mobile Devices, ICS  Specialized Data Analysis  RAM  Dynamic / Static Malware Analysis  Timeline  Data Correlation and Visualization 6

7. Questions? Contact Info: lee.shields@rcmp-grc.gc.ca 613-843-3397 RCMP Detachments: http://www.rcmp-grc.gc.ca/detach/index-eng.htm 7